GitHub scam notifications

voklen@programming.dev to Programming@programming.dev – 29 points –

Recently I've noticed there have been GitHub accounts that post some scam, mention a bunch of random accounts so it ends up in people's emails, and then delete the post before anyone can report them.

Now this isn't a big deal to me but when I got mentioned in one they deleted it before I could see the notification and for some reason GitHub now eternally shows me the blue dot as if I have an unread notification but when I click on to it there's nothing there. Curiously at the side there's also a little ‘1’ as if I have a notification even though it of course can't show it.

Has anyone else experienced this and has anyone found a way to solve it?

8

https://arstechnica.com/security/2024/02/github-besieged-by-millions-of-malicious-repositories-in-ongoing-attack/

Not even github can fix the problem.

Be aware of it, and don't click any links in the notifications.

I recently started using forgejo and its glorious. I havent tested federation yet but they’re working on it. Github isnt better imo. I‘d suggest folks mirror their github on forgejo by default.

I recently switch Gitea to Forgejo, I had concern about the direction Gitea was going, the mirror features is definitely one the of killer features and the fact I can back it up to a zip file is the icing on the cake 😄

It just nice to have full data sovereignty.

Can relate! I‘m a lot more excited for this than I should be!

Did exactly this recently and it's been quite good. Forgejo-runner was a bit tricky to setup but overall a great experience.

I‘m not using ci/cd which I suppose runner is? Feel free to elaborate. I‘m eager to learn.

Yeah it's a ci/cd runner, using a tool called "act". I self-host forgejo and the runner is a docker-in-docker container, but one could set it up with the public forgejo as well. It's pretty neat!

Very cool! I will absolutely check that out! Thanks for explaining!

1 more...