Star-Me: Learn about Running Scripts in the Browser Console and Explain Advantages and Potential Security Implications of Unknown Scripts
The goal of this task is to learn about scripting, running scripts in the browser console, potential security implications and specifically to understand about the functionalities of the Star-Me script.
BACKGROUND
Currently GitHub does not have a feature to follow all activities in an organization. The Star-Me script can help newbies to follow repositories of the FOSSASIA organization, suborgs, developers and stay up to date on activities. After executing the script organization repositories are starred and newbies will now see any changes in the organization in their GitHub news stream. But, is it a good idea to run a script in the browser console without checking its code and understanding what it really does?
TASK
Your task is firstly to research possible advantages and possibilities for developers vs. dangers of running unknown scripts. Please start with answering the following questions:
- What does the Star-Me script do?
- Is the Star-Me script dangerous? Why or why not?
- Tell us your ideas what you could do with a script.
- What are the dangers of executing an unknown closed source script, e.g. which is part of a proprietary browser extension vs. to an Open Source script?
Secondly, learn about how scripts work and show us how to change a script using the example of the Star-Me script. To do this:
- Fork the repository (Share link here)
- Add your own username in the script to follow yourself into your own fork
LINKS
Star-Me Script: https://github.com/fossasia/star-me