[rescue] Disassembler for boot proms

Dan Moisa dmoisa at gmail.com
Mon Jan 20 15:43:08 EST 2025


Gmail is making a link out of the git. part and stripping the git://
protocol, so I'm sure it's an easy mistake for folks.

On Mon, Jan 20, 2025, 10:23 Mouse via rescue <rescue at sunhelp.org> wrote:

> Yesterday, I wrote various stuff in this thread about some of my git
> repos and such.
>
> Shortly after the first such mail, I found evidence in my logs that
> someone was, effectively, swapping out git:// for http:// and trying to
> fetch the resulting URL.  I dropped a note to the list pointing this
> out, and (possibly in consequence, possibly not) the attempts (and the
> border-router bans they provoked) stopped.
>
> Then, more recently, I wrote about a handful of other repos and my logs
> again show attempts at HTTP fetches of the paths I mentioned.
>
> I speculate that someone has something automated that's replacing the
> git:// with http:// and trying to fetch the result.  I strongly suggest
> that anyone using such software shut it off; letting something as
> untrusted as a mailing-list message cause you to perform an HTTP fetch
> of a URL of a (putative) attacker's choosing is an extremely bad idea.
> This is a relatively benign example of why.
>
> Yesterday, I manually lifted the bans I saw.  I'm no longer doing that
> on my own initiative; if you think you've fallen afoul of such a ban,
> get the relevant IP address to me and I can check and, if it's banned,
> remove it.  Or you can just not send anything to my /29 (v4) or /60
> (v6) for a week; my router bans time out after a week of seeing no
> traffic from the banned IP.
>
> /~\ The ASCII                             Mouse
> \ / Ribbon Campaign
>  X  Against HTML                mouse at rodents-montreal.org
> / \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B
>
> _______________________________________________
> rescue list - http://sunhelp.org/mailman/listinfo/rescue_sunhelp.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://sunhelp.org/pipermail/rescue_sunhelp.org/attachments/20250120/ac552215/attachment.html>


More information about the rescue mailing list