FOSSASIA

Star-Me: Learn about Running Scripts in the Browser Console and Explain Advantages and Potential Security Implications of Unknown Scripts

The goal of this task is to learn about scripting, running scripts in the browser console, potential security implications and specifically to understand about the functionalities of the Star-Me script.

BACKGROUND

Currently GitHub does not have a feature to follow all activities in an organization. The Star-Me script can help newbies to follow repositories of the FOSSASIA organization, suborgs, developers and stay up to date on activities. After executing the script organization repositories are starred and newbies will now see any changes in the organization in their GitHub news stream. But, is it a good idea to run a script in the browser console without checking its code and understanding what it really does?

TASK

Your task is firstly to research possible advantages and possibilities for developers vs. dangers of running unknown scripts. Please start with answering the following questions:

  1. What does the Star-Me script do?
  2. Is the Star-Me script dangerous? Why or why not?
  3. Tell us your ideas what you could do with a script.
  4. What are the dangers of executing an unknown closed source script, e.g. which is part of a proprietary browser extension vs. to an Open Source script?

Secondly, learn about how scripts work and show us how to change a script using the example of the Star-Me script. To do this:

  • Fork the repository (Share link here)
  • Add your own username in the script to follow yourself into your own fork

LINKS

Star-Me Script: https://github.com/fossasia/star-me

Task tags

  • browser console
  • security
  • star-me
  • scripting

Students who completed this task

Chi Weiqin Isis, okidoki1234, samxwhich, K.G.Rama lokeshwar, aryanguls, yes, avocato, Goat, Pekka, junhan, SIngNOwYT, thotslayer69, bond007, Abhra Kanti Dubey, JAMI1, KangKong!!!, Ert, Yard, Muhammad Wasif, Peace~, CHY, Blappy, Cyrus, dimpl3s, Coconut, Chloe, jamu, Kxrius, Lim Yu Wei, wsq, natalie1254, eRrOr, Devansh3712, 4wq.re, xumaeii, mangoicecream, Min Jia, Ashwanth Kumar B, miaoxuan, acejo21, nataliee, Johnson, Failure_Noob, woofiee, onebignick, Kangzxjssie, IsaacC, mimi, Ashley Tan, smallonion, zhi ting, wxyeo, Maydalynn, Kumuditha_S.A.C.K, Rey4ever9135, weeeeeeep, billiehotbean, Sashka, Mic2307, Chamod Nilushanka Perera, Zara, ACZ, Liu Jiaming, Keefe1, parzivox, Swaroop, makoteq, Jinglebells, Craftegg, Ethan Tan, jOaniscool, Alyssa Is a Bell, Sid911, milkcartons, Xu Sijia, xiang jiao, ian1, Darrius Lee, @ew, spaghett, dongyu, zeen, Why0Why, ilovedengziqi, yowhatsthepassword, Xy, zezi, k, Coder, yiheng, Jols, any._how, valerie.chan, SHAIK SAMI, gladys_lrq, ItsMeKimi, xinyu, Yan Ying, sheriyay, MX._., bigmamauwu, HappyBeary360, GoogleHY, g_if, tianchi, Wang Chen, Friend4

Task type

  • code Code
  • chrome_reader_mode Documentation / Training
  • assessment Outreach / Research
  • done_all Quality Assurance
close

2019