30 ms·
GitHub can alter the CODE. Why it should play with just a key? If GitHub wants to pwn the whole world, it can do it right now.
by drran 5y ago
GitHub can alter the CODE. Why it should play with just a key? If GitHub wants to pwn the whole world, it can do it right now.
- flir 5y agoCan't argue with that, except to say "because it's bad, lets make it worse" doesn't feel like a good rule of thumb.
- deleted 5y ago[deleted]
- fortran77 5y agoWell, github will already shut down repositories that contain words that they deem unacceptable. So they are doing it now... https://news.ycombinator.com/item?id=9966118 https://news.ycombinator.com/item?id=9966118
- judge2020 5y agoGH specifically going out of their way to falsify keys of a user would be a much bigger breach of trust than just shutting down repos. They know ssh-import-id-gh is a thing and people use it.