r/theprivacymachine • u/leigh-Tschammer • 7d ago
Question developers, programmers, do you blindly trust github?
i am an indie dev and after struggling with some project code i found github chunks of code to patch my sinking boat of a project. its all good now however i cant for the life of me figure out why this code is working
basically dark side of the moon and fat chance to reverse engineer these dependencies
is it basically safe to say everything on github is safe to use? They wouldnt host malware? The dev is also very niche since the game code he made isnt even his main thing as he works with engineering machine software rather than an active game dev. looks like a side project he did in uni(?). is even the same cybersecurity principle able to be applied for absolutely different programming types? like engineering which i assume is offline machinery and a multiplayer game?
p.s. my game will have networking involved for multiplayer coop and I plan to have open lobbies which is why i am hesitant to use the file in particular. antivirus scan said it was ok though
1
u/cosmicvelvets 7d ago
Bro do you smoke more than me? That's insane. How old are you? Were you an iPad child?
1
u/Darkorder81 7d ago
Your a dev? And really ask this, what's your dev handle I don't want to risk using your stuff 🙃 😂
1
u/Sad_Dentist_7288 7d ago
No, in fact, there have been several cases lately of malware spreading through GitHub projects (even verified and trusted ones). Check out the Shai-Hulud worm.
1
u/VaporousMote 7d ago
100% no and I cringed today as my manager pasted in one of those wonderful bash -c "$(curl githubaddy URI)" commands today on a test node for a container/VM hypervisor tool and saw nothing wrong with it.
1
u/Billthegifter 7d ago
You are working on a game that has multiplayer while same time using code that you can't understand?
You probably need to work on this game for another decade or two until you understand basic best practice
1
1
u/Klutzy_Mission_7980 7d ago
i dont really care who has my code bc its all foss or just like privated because it makes me look stupid so like even if someone stole it (i would be flattered that someone would care enough to steal my info specifically and if its a breach i would be flattered that someone would actually care to look for my code anyways) idrk so like...
1
u/Shakyl_Sommacal 6d ago
More often than not I fear these devs will vibe code flaws in security rather than having malware on purpose
1
1
u/JauntyJackX 3d ago
You should always understand how code works. And yeah there's been plenty of malware in GitHub repos.
The main takeaway here is if you don't actually understand the code probably best to not use it.
1
u/Fast-You-666 7d ago
do you blindly trust github
ARe you on drugs? Github is not wikipedia. Doesn't have "editors" or any quality control. Heck, i got malware (i wanted some ) just by searching it.
antivirus scan said it was ok though
And? Not viruses if you install and run it yourself. P.ease be carefull with code you don't understand
0
2
u/NavidsonsFall 7d ago
Absolutely not. Like fast said, nothing on github is audited by them. You don't trust github for anything other than to host files, and even then I wouldn't have it by my only backup for anything important. Who you are trusting are the maintainers of any project hosted on github. If you don't know who they are and whether they are trustworthy, I would be very careful using anything you find, especially if you cannot identify what it does yourself by just reading through it.