GitHub scam notifications

voklen@programming.dev to Programming@programming.dev – 29 points –

Recently I've noticed there have been GitHub accounts that post some scam, mention a bunch of random accounts so it ends up in people's emails, and then delete the post before anyone can report them.

Now this isn't a big deal to me but when I got mentioned in one they deleted it before I could see the notification and for some reason GitHub now eternally shows me the blue dot as if I have an unread notification but when I click on to it there's nothing there. Curiously at the side there's also a little ‘1’ as if I have a notification even though it of course can't show it.

Has anyone else experienced this and has anyone found a way to solve it?

8

You are viewing a single comment

https://arstechnica.com/security/2024/02/github-besieged-by-millions-of-malicious-repositories-in-ongoing-attack/

Not even github can fix the problem.

Be aware of it, and don't click any links in the notifications.

I recently started using forgejo and its glorious. I havent tested federation yet but they’re working on it. Github isnt better imo. I‘d suggest folks mirror their github on forgejo by default.

Did exactly this recently and it's been quite good. Forgejo-runner was a bit tricky to setup but overall a great experience.

I‘m not using ci/cd which I suppose runner is? Feel free to elaborate. I‘m eager to learn.

Yeah it's a ci/cd runner, using a tool called "act". I self-host forgejo and the runner is a docker-in-docker container, but one could set it up with the public forgejo as well. It's pretty neat!

Very cool! I will absolutely check that out! Thanks for explaining!

I recently switch Gitea to Forgejo, I had concern about the direction Gitea was going, the mirror features is definitely one the of killer features and the fact I can back it up to a zip file is the icing on the cake 😄

It just nice to have full data sovereignty.

Can relate! I‘m a lot more excited for this than I should be!

1 more...