GitHub has not removed malicious imitation software after 3 weeks

Author of the post here. Github finally took the offending page down approximately 10 minutes after the post appeared on the front page of HN. Total coincidence. I'm sure!

Moral of the story. If you want even the most basic level of support from Github, you need to get on the front page of HN first.

And it seems they are able to do things very quickly, when they want to. Bastards.

I see OP edited their post claiming getting to HN's front helped.

I think the likelihood GitHub did something within 10 minutes of a post appearing on HN's front page is approximately zero.

Nobody in GitHub Trust & Safety is sat there watching HN.

An executive or communications professional who might have heard it got on HN, or seen it appear in a tool monitoring Microsoft and GitHub's mentions across the internet, and who then flagged the post, Trust & Safety would probably spend *more than 10 minutes* noticing the email or Teams message, then trying to find the right ticket internally. Then after locating the ticket you still have to investigate the facts, discuss, and click buttons to ban/delete the user.

It's (much) more likely this sat in a queue until someone got to it and the timing of it being on HN is a complete coincidence.

I recently found "free" version of Lossless Scaling on GitHub. The release installer is definitely malware. It took GitHub 3 days to shutdown malware distribution. Category of my ticket was malware report, not copyright infringe

They’re presumably too busy with keeping availability above nine sixes

If GitHub staff is still reading this thread, maybe you can take down https://screenmemory.github.io/ as well. I reported it 4 weeks ago, ticket ID 4703161

Three weeks? Try almost three years:

https://lowendbox.com/blog/will-github-ever-remove-this-null...

I found a page that serving e-books I've purchased on github. It is a bit bad feeling

Not exactly the same, but I've noticed a pretty sizable uptick in the number of spam/scam PR comments being left on GitHub (and a longer delay before they're removed after report).

Not the worst thing in the world, they're easy to spot, but I'd like to see GitHub invest more time in protecting their users from falling victim to these bad actors.

What do you know. Apple’s “never run to the media it never helps anything” rule works just as well with GitHub.

In the future just issue a DMCA takedown right away for cases like this, IMO.

Welcome to the club!

There's an impersonation profile of me on Github (username happyhannob). I've reported it a while ago, received the same automated message, and no reaction otherwise. It's still online.

I guess you can't expect basic fraud prevention from a company currently building the future with AI...

[dead]

why would anyone host commercial binary software on github or any other third party domain?

If it's your software send a DMCA. They have a legally required timeframe to process those. If it's open source, however, then you don't have any valid DMCA claim.