I found 10k GitHub repositories distributing Trojan malware | EP #77

Good morning, it's Friday. This is Guru's Tech Bytes, episode 77. Pour the coffee, wiggle the mouse so Teams thinks you're alive, and let's see what the internet dragged onto the porch today. First up... somebody says they found ten thousand GitHub repositories handing out Trojan malware, which is the kind of number that makes your stomach do a little Windows update reboot. The scam is hiding nasty stuff in places developers trust, like sample code and repos that look just real enough. So today’s friendly reminder is: don't curl-pipe mystery meat into production unless you enjoy explaining ransomware to accounting while the printer blinks like it knows what you did. Second... dot-gitignore is apparently not the only way to ignore files in Git. There are exclude files, global ignores, and other little secret drawers where Git hides the socks you thought the dryer ate. It's useful power-user stuff, but also a reminder that every tool eventually becomes a haunted mansion if you give it thirty years, enough config files, and one developer named Kyle who documents nothing. Third... a privacy advocate says they told Elkjop forced consent was unlawful, and five years later it helped produce a one-point-eight million euro fine. That is a long receipt, like when you find out the grocery store loyalty card has been narrating your life to a spreadsheet. The lesson is simple: consent can't be a pop-up mugging where the only real button is “sure, take my data, I guess.” And finally... Cornell’s self-guided advanced compilers course is making the rounds again, for anyone who looked at software and said, “I want to understand the dragon that turns my code into weird fast machine noises.” Compilers sound dusty, but they are right under all the AI tooling, databases, browsers, and tiny devices trying not to burst into flames, quietly doing the kitchen math nobody thanks. Heh. Hhh, okay, that's something. That's your daily byte. Have a great day, patch your supply chain, read the weird manual, and maybe ask consent like a normal person. Until next time. Stories covered I found 10k GitHub repositories distributing Trojan malware — Hacker News .gitignore Isn't the only way to ignore files in Git — Hacker News I told them forced consent was unlawful. 5 years later it cost Elkjop €1.8M — Hacker News CS 6120: Advanced Compilers: The Self-Guided Online Course (2020) — Hacker News