700+ self-hosted Git instances battered in 0-day attacks
www.theregister.com
: More than half of internet-exposed instances already compromised

By ‘Git instances’ they mean Gogs instances that allow open registration. I know most of the community moved from Gogs to Gitea, and then to Forgejo, but thought this was still worth noting.

  • 1984@lemmy.todayEnglish
    18·
    23 hours ago

    Yeah. If I needed collaboration, I would just whitelist their ips or require everyone involved to use Wireguard vpn, Tailscale or other solutions that allows access without being publically exposed.

    • quick_snail@feddit.nlEnglish
      71·
      21 hours ago

      That kills collaboration from new people who just, like, discovered your project on some Lemmy thread

      • Natanael@infosec.pubEnglish
        6·
        21 hours ago

        They can still collaborate old school way. You can publish static mirrors of git, then take email patches lol