←back to thread

Ghrc.io appears to be malicious

(bmitch.net)
407 points todsacerdoti | 1 comments | 24 Aug 25 23:27 UTC | HN request time: 0s | source
Show context
usr1106 ◴[25 Aug 25 04:04 UTC] No.45010088[source]▶
One reason why you should never think or say ghcr, but always github container register, even if that is longer. You should have enough time for not getting trapped.

Root cause a stupid FLA of course. For several months I thought it means Google whatever register.

replies(2): >>45010504 #>>45012583 #
_def ◴[25 Aug 25 05:26 UTC] No.45010504[source]▶
I couldn't find anything useful - what is a FLA?
replies(3): >>45010589 #>>45010606 #>>45022278 #
1. usr1106 ◴[26 Aug 25 04:26 UTC] No.45022278[source]▶
Of course I made it up, I assumed TLA is known as three letter acronym. Now ghcr has four of them...