2 ms·
Yeah, I figure you all know that :) I just think calling it "forgery" / "fraudulent" makes it sound like a Git/GitHub vulnerability. It's a feature that depends
by geofft 8y ago
Yeah, I figure you all know that :) I just think calling it "forgery" / "fraudulent" makes it sound like a Git/GitHub vulnerability. It's a feature that depends on trust and goodwill, and the fact that trust can be abused isn't interesting.
For instance, if I wrote "Hey HN, one of the creators here" when I'm not, people wouldn't call that "HN comment forgery" - they'd just call it regular lying.
- EthanHeilman 8y ago>It's a feature that depends on trust and goodwill Such features can be a vulnerability, a vulnerability does not have to be an accident >the fact that trust can be abused isn't interesting As a security researcher it is interesting to me but clearly YMMV