Hacker News Reader

The author is pretty well-known

https://en.wikipedia.org/wiki/Matthew_Garrett

That alone is not enough, though it helps. Being well-known means a more desirable account to steal, and this is code that must be run as root.

Moreover there is no trivial way to verify that https://github.com/mjg59 is github accout of Matthew Garrett. So all one needs to do is to create account that looks good and most people assume that it's safe.

Obviously I'm not saying that this is the case here. But it might not be the best idea to run whichever github project someone links to under root.

Yep, that's what I thought, too :-D

I tried to find some "Github" link in mjg59.dreamwidth.org pointing to github.com/mjg59, but I don't think there is any.

Definitely, you don't feel comfortable cloning and building a git repo to run it as root :P

> I tried to find some "Github" link in mjg59.dreamwidth.org pointing to github.com/mjg59, but I don't think there is any.

There is one here: https://mjg59.dreamwidth.org/38136.html

Reply on news.ycombinator.com