logoalt Hacker News

zietoday at 8:55 PM2 repliesview on HN

I love that under disclosures "Plugin might make requests to 1 external domain", if you click on it, it shows the domain: "github.com". great work!

Example from https://community.obsidian.md/plugins/zotlit


Replies

subscribedtoday at 9:44 PM

Which is brilliant...... Especially if we remember how easy is to host a (malicious) script on github :)

But yes, great work indeed. It finally makes me want to move over to Obsidian.

show 1 reply
trvztoday at 9:06 PM

I'd say that may be as harmful as it is helpful. Amateur users may have heard of Github and would therefore trust that domain, but you can upload malware to Github just as easily as anything else.

show 1 reply