If you're developing a FOSS project, be aware of cryptobros trying to PR a tea.yml into it. : opensource

[-] CrayonRosary@lemmy.world -2 points 8 months ago

Am I stupid? How is this in any way confusing?

I kept re-reading this line and it made no sense. All I need to do to claim ownership of a project is merge a pull-request? Do I own Laravel because I've gotten a pull request merged? (emphasis mine)

Merging a pull request and having a pull request merged are two completely different things, and one very much requires you to own the project or have contributor rights to it. Which is exactly what the scammer is looking for proof of.

How was the author confused by this? Or am I somehow the dummy here?

[-] chebra@mstdn.io 0 points 8 months ago

@CrayonRosary having a pull request merged is in no way a proof of ownership of the repo, or a sign that the owner wants to participate in this scheme. There are better ways to prove ownership. It's relatively easy to slip in some file unnoticed, or falsely explain during the PR process what the file represents. So choosing this way of validation is a huge red flag about the whole scheme. It motivates people to falsely claim ownership of popular repos.

[-] CrayonRosary@lemmy.world 1 points 8 months ago

having a pull request merged is in no way a proof of ownership of the repo

That's literally what I was saying! That was the entire point of my comment!

[-] delirious_owl@discuss.online -4 points 8 months ago

Gitea? What is this?

[+] toastal@lemmy.ml -98 points 8 months ago* (last edited 8 months ago)

The easy red flag here is YAML. It’s a hideous, overly-complex format for anything so of course a scam would choose it.

[-] CannotSleep420@lemmygrad.ml 3 points 8 months ago

Does this mean docker compose files are bad?

[-] toastal@lemmy.ml 1 points 8 months ago

💯 Switch to Nix immediately

load more comments (47 replies)

[+] SwingingKoala@discuss.tchncs.de -125 points 8 months ago* (last edited 5 months ago)

[deleted]

[-] LufyCZ@lemmy.world 3 points 8 months ago

Hilarious well done

[-] Omega_Haxors@lemmy.ml -1 points 8 months ago

Admins please include instance blocking for comments, thanks. No instance ending in .de ever has anything of value to say.

load more comments (15 replies)

Open Source

Useful Links

Rules

Related Communities