ChoosesBarbecue

> Please be careful when revoking tokens. It looks like the payload installs a dead-man's switch at ~/.local/bin/gh-token-monitor.sh as a systemd user service (Linux) / LaunchAgent com.user.gh-token-monitor(macOS). It polls api.github.com/user with the stolen token every 60s, and if the token is revoked (HTTP 40x), it runs rm -rf ~/. (It looks like it might also have a bunch of persistence mechanisms. I haven't studied these closely.)

Jesus, that's vindictive.

I'm passively curious how the long-term maintenance of this all ends up. You don't just build a bridge, you have to keep it up when the natural strain of the world impacts upon it. Given provinces already have debt problems [0], how the hell will all of this infrastructure look in 50 years?

[0]: https://www.scmp.com/economy/china-economy/article/3254680/c...

> Part of Cialdini’s large book-buying audience came because, like me, it wanted to learn how to become less often tricked by salesmen and circumstances. However, as an outcome not sought by Cialdini, who is a profoundly ethical man, a huge number of his books were bought by salesmen who wanted to learn how to become more effective in misleading customers.

(Poor Charlie's Almanack, Charlie Munger)

The book really helped me put things into perspective as a teenager who was habitually "angry", and "on the less adept at social side of things"[0]. Had a much healthier time growing up afterwards. Honestly, I should re-read it.

[0]: I am not formally neurodivergent, but I wouldn't be surprised if I was mildly so.