Good Point! I’ll check if my forgejo container has password auth enabled. :D It’s LAN only though.
Comment on Update all your stuff, NOW - again.
HelloRoot@lemy.lol 1 hour agoMaybe something like git forges and gist alternatives?
tofu@lemmy.nocturnal.garden 50 minutes ago
smiletolerantly@awful.systems 41 minutes ago
Remember, password-auth off is the problematic setting.
Orygin@sh.itjust.works 31 minutes ago
No you’re wrong. Stop dramatizing and spreading false info. From your link:
Prerequisites: Are password logins still on?
You can’t trigger this if password auth is disabled.
qaz@lemmy.world 49 minutes ago
I wonder if Forgejo / Gitea instances are vulnerable