Avatar
0xtr 1y ago

If you haven’t patched your GitLab instance since the start of the year, it could be smart to so asap

https://arstechnica.com/security/2024/05/0-click-gitlab-hijacking-flaw-under-active-exploit-with-thousands-still-unpatched/

Reply to this note

Please Login to reply.

Discussion

Avatar
Layerjack (Onion Knight) 1y ago

Fuck git. Return to emailing tarballs.

Avatar
Low Information Voter 1y ago

Ed scripts. You know it.

Git over Nostr wen?

SSB has had it for years.

(Of course its slow and unreliable given SSB's architecture.)

Avatar
Layerjack (Onion Knight) 1y ago

I don't know ed scripts.

I quite like SVN. Github is basically SVN on top of git. It's retarded.

Avatar
0xtr 1y ago

Git has nothing to do with this though. That’s like saying «fuck car wheels» after a car has crashed😂

Avatar
Layerjack (Onion Knight) 1y ago

Well, why is it so complicated that it enables exploitation of the supply chain?

Avatar
0xtr 1y ago

It isn’t. This was just GitLab failing to implement a GitLab account recovery feature