Developer Musings (opens on the publisher’s site)
joshghent.com
Joshua Morris (opens on the publisher’s site)
joshuamorris.info
-
Citizen Dot documents a fake LinkedIn recruiter’s coding assignment that hid malware in .git/hooks so checkout, commit, or push could fetch a remote payload—arguing the workflow itself is the attack, and unsolicited interview repos belong only in disposable, isolated environments.