3 ms·
I don't understand why people were voting this comment down in the issue page
by meander_water 5mo ago
I don't understand why people were voting this comment down in the issue page
- deleted 5mo ago[deleted]
- bpavuk 5mo agobots. the GitHub bot law: the GitHub bot situation is way worse than you imagine even if you are aware of the GitHub bot law. yes, a cheap parody on Hofstadter's law, but that's how bad it is
- sieabahlpark 5mo ago[dead]
- skissane 5mo agoMaybe they have a non-standard interpretation of thumbs-down – as "thumbs-down to this fact" not "thumbs-down to you for pointing it out"
- hmokiguess 5mo agoI have noticed this behaviour happening more often too, it's very confusing. Usually when texting with younger Gen Z people.
- efilife 5mo agoThis has always been happening
- Griffinsauce 5mo agoWe lived through a generation of agism at millennials and now we're turning around and doing it at Gen Z. It's unbelievable.
- bpavuk 5mo agothe history repeats itself approximately every 20 to 33 years!
- thayne 5mo agoWhen you only have eight emoji reactions to choose from, people are bound to get creative in how they use them.
- matsemann 5mo agoOr they're from Eridian.
- ge96 5mo agoamaze amaze amaze
- noodletheworld 5mo agoThere is no such thing as please be careful when revoking tokens. What does that mean? Dont revoke them? Look at them carefully before revoking them? And what? Just let the actor just keep using them to spread to other people? Always rotate your tokens immediately if they're compromised. If it hurts, well, that sucks. …but seriously, not revoking the tokens just makes this worse for everyone. A fair comment would have been: “it looks like the payload installs a dead-mans switch…” Asking the maintainers not to revoke their compromised credentials deserves every down vote it receives.
- wavemode 5mo agoYou seem to be interpreting "please be careful when..." as "don't". I'm not sure how that interpretation makes any sense. Obviously they just mean, first kill the service (or better yet, shutdown the machine entirely) and then revoke the token...?
- yuzuquat 5mo agomy understanding is that careful means cleaning up the dead-man’s switch before revoking
- deleted 5mo ago[deleted]
- mosen 5mo agoDid you miss the part about the script that nukes your home folder?
- CodesInChaos 5mo agoHere being careful about revocation means: Make sure to have an up-to-date backup, that's offline, or at least not mounted on the affected computer. Check for the dead-man switch, and if present, disarm it. Only then revoke the tokens. Instead of immediately revoking the tokens, like one would normally do. Nobody is suggesting to keep the compromised tokens active longer than necessary.
- edoceo 5mo agoWe need a new emoji for: the situation is lame and the poster is correct. Like a combination of thumbs-up+frown
- __david__ 5mo agois not bad for that. Not precise, but in the ballpark.