700+ self-hosted Git instances battered in 0-day attacks
www.theregister.com
: More than half of internet-exposed instances already compromised

By ‘Git instances’ they mean Gogs instances that allow open registration. I know most of the community moved from Gogs to Gitea, and then to Forgejo, but thought this was still worth noting.

  • Lightfire228@pawb.socialEnglish
    11·
    6 hours ago

    But it doesn’t have any built-in concept of users, write permissions, or authentication (except for commit signing)

    Hosting an unauthenticated git repo would be the equivalent to an open ssh port with no password required

    Not to mention collaborative things like issue tracking, PRs, forums, etc

    • JackbyDev@programming.devEnglish
      4·
      6 hours ago

      Forgejo has all that, and then you can achieve “federation” by virtue of pushing to whatever remote. I wasn’t suggesting people use git itself (which is possible). I just meant that it’s distributed as opposed to centralized like Subverison is.