4 ms·

1. Gets lots of karma from silly/fake projects 2. Send in a PR to a high profile project with obfuscated malicious code 3. ??? 4. Profit.

• BCM43 14y ago
  Why can't you do this now?
  • gvc 14y ago
    Yeah, I'm not really sure what his point was with that. It's not that the article proposes a god github account that call push to any repo without being watched.
  • gcb0 14y ago
    because you either have to: - convince everyone that your fork is better - pass the obfuscated code by the project owner who is very knowledgeable of the code base he started.
• roryokane 14y ago
  You can avoid this problem by making karma repo-local.