Hacker News Reader

Comment by cpeth | Hacker News Reader

As someone who loves the dev experience of WSL2 on Win11, try out https://github.com/LeDragoX/Win-Debloat-Tools to strip down your Win install and get some resources back.

View on HN

Feels like swimming against the current tho. Said dev experience poorly emulates actual linux at best. Also, I’d think twice before running custom windows isos or unvetted scripts.

I wonder how well audited these random GitHub projects are that claim to make Windows suck less.

Running random shit from GitHub with my root password gives me the creeps, even though most of them are probably innocuous.

I've been thinking along similar lines for a while now, among a lot of users there isn't a sense of security 'hygiene' and a lot of trust granted that doesn't have a foundation beyond looking legit (i.e. has a github). The main thing that seems to be stop it happening is a lack of returns compared to going after a corporation or social engineering/phishing to find someone who will give you money. What I do wonder about is supply chain attacks on something used by a lot of smaller projects, which would end up hitting more targets compared to compromising individual small projects.

Be wary, unknown actors are targeting devs. My email that is only exposed in github recieves targeted mails on the regular, maybe randomly or maybe because I released and contributed to several popular code bases.

Dev credentials tend to unlock more doors than hacking a soccer mom.

Reply on news.ycombinator.com