9 ms·

The author is pretty well-known https://en.wikipedia.org/wiki/Matthew_Garrett https://en.wikipedia.org/wiki/Matthew_Garrett

• mkl 9y ago
  That alone is not enough, though it helps. Being well-known means a more desirable account to steal, and this is code that must be run as root.
  • tumdum_ 9y ago
    Moreover there is no trivial way to verify that https://github.com/mjg59 https://github.com/mjg59 is github accout of Matthew Garrett. So all one needs to do is to create account that looks good and most people assume that it's safe. Obviously I'm not saying that this is the case here. But it might not be the best idea to run whichever github project someone links to under root.
    • filomeno 9y ago
      Yep, that's what I thought, too :-D I tried to find some "Github" link in mjg59.dreamwidth.org pointing to github.com/mjg59, but I don't think there is any. Definitely, you don't feel comfortable cloning and building a git repo to run it as root :P
      • dbdr 9y ago
        > I tried to find some "Github" link in mjg59.dreamwidth.org pointing to github.com/mjg59, but I don't think there is any. There is one here: https://mjg59.dreamwidth.org/38136.html https://mjg59.dreamwidth.org/38136.html