News for hackers. Stuff that matters.
Re:Critical security updates for Git, Subversion and Mercurial by icc97 on Friday August 11, 2017 @07:20AM (#14988468)
Kudos to Chocolatey on Windows, they immediately updated their Git package [0] to v2.14.1, so a simple `choco upgrade -y git` gets me up to date. If only life on Windows had always been this hassle free.

[0]: https://chocolatey.org/packages/git

Re:Critical security updates for Git, Subversion and Mercurial by skrebbel on Friday August 11, 2017 @09:10AM (#14989257)
Getting off topic fast, but I always found Chocolatey to be needlessly complicated and messy.

I was very happy when I found http://scoop.sh. It's simpler and slightly less powerful, and most notably it just runs official installers in the background instead of copying binaries over from the source and packing them up in a special way.

(It's also at the latest got already)

Re:Critical security updates for Git, Subversion and Mercurial by jpfed on Friday August 11, 2017 @10:55AM (#14990256)
>Getting off topic fast, but I always found Chocolatey to be needlessly complicated and messy.

I haven't released it yet, but Napkin solves this very issue.

Re:Critical security updates for Git, Subversion and Mercurial by kakarot on Friday August 11, 2017 @03:57PM (#14993552)
Would you mind elaborating?
Re:Critical security updates for Git, Subversion and Mercurial by 0xffff2 on Friday August 11, 2017 @08:41PM (#14995624)
I really hope it's just a joke about overly opaque project naming, possibly riffing on the need for a napkin after a "Chocolatey" "Scoop" [of ice cream].
Re:Critical security updates for Git, Subversion and Mercurial by kakarot on Saturday August 12, 2017 @02:34AM (#14996736)
oh damn you're right, I didn't catch the humor. Thanks ~
Re:Critical security updates for Git, Subversion and Mercurial by ericfrederich on Friday August 11, 2017 @10:00AM (#14989717)
Thanks for getting off-topic. These seem useful... until WSL becomes more mainstream.

Part of my workflow involves using ncat.exe to use git over a socks/ssh proxy. A real pain. I noticed scoop has nc but not ncat.

Re:Critical security updates for Git, Subversion and Mercurial by skrebbel on Friday August 11, 2017 @10:47AM (#14990152)
I find `bash -c blablabla` works great for invoking the occasional Linux commands without moving to WSL entirely.

(Actually I used to run all devtools, eg git and webpack I etc etc on WSL entirely but it still has too many quirks. Moved back to plain Windows recently and I'm happier)

Re:Critical security updates for Git, Subversion and Mercurial by pjmlp on Friday August 11, 2017 @02:17PM (#14992714)
Being on MS-DOS since 3.3, and being introduced to UNIX via Xenix, I have found out through the years that the best way is just to use the native CLI of each platform.

For stuff that needs to run everywhere and I don't feel like writing two versions of scripts, I just use Python.

Re:Critical security updates for Git, Subversion and Mercurial by toxican on Friday August 11, 2017 @09:31AM (#14989432)
Maybe I needed to configure something, but I tried Chocolatey a little while ago on a fresh install of Windows and it seemed to take forever to do anything. Maybe I'm just spoiled by how quickly apt update and apt upgrade go, but it would hang for so long that I thought chocolatey had frozen.
Re:Critical security updates for Git, Subversion and Mercurial by yread on Friday August 11, 2017 @09:34AM (#14989462)
antivirus?
Re:Critical security updates for Git, Subversion and Mercurial by toxican on Friday August 11, 2017 @11:17AM (#14990503)
I don't think so. All I've got is Windows Defender and seeing as how that's a default program in 8 and 10, I'd expect a little more effort on Chocolatey's part to notifier users about that if it was the cause.

I don't really get it. I did a fresh install of it a few minutes ago, gave the command to install 7zip. Then it downloaded the file, said it was installing, and it just sat there for 10-15 minutes before I got fed up and hit CTRL+C to cancel it. Then it kicked back into gear and magically finished the install somehow?

Re:Critical security updates for Git, Subversion and Mercurial by colinramsay on Friday August 11, 2017 @07:26AM (#14988511)
Ditto for brew - I updated to 2.14.1 from there this morning.
Re:Critical security updates for Git, Subversion and Mercurial by chmike on Friday August 11, 2017 @03:23PM (#14993287)
How did you do this ? I just did a brew update && brew upgrade and still have git 2.13.0. I'm not an experienced mac user. EDIT: I followed directives given [here](https://medium.com/@katopz/how-to-upgrade-git-ff00ea12be18). I had git installed in /usr/local. I had to use the commands brew install git and brew link --overwrite git. I don't know if this was the correct way to do it.
Re:Critical security updates for Git, Subversion and Mercurial by OhSoHumble on Friday August 11, 2017 @07:51AM (#14988670)
I really wish Chocolatey was more officially adopted by packagers. Often packages on there are outdated or just plain don't work... but, when they do work, it radically changes how software is installed on Windows.
Re:Critical security updates for Git, Subversion and Mercurial by oblio on Friday August 11, 2017 @09:19AM (#14989320)
I tried Chocolatey a while ago. Does it still install things all over the place by default? I with it could have some sort of install prefix, I'd use it then.

Edit: it seems to have one.

Re:Critical security updates for Git, Subversion and Mercurial by nolok on Friday August 11, 2017 @10:28AM (#14989968)
Yes, you need to know the command line switch for each package/installer separately to install in the proper place.

They have a switch to configure it once and have their tool figure out the right argument for each installer by itself, but it's only for paid users (~$96/year)

Re:Critical security updates for Git, Subversion and Mercurial by e12e on Saturday August 12, 2017 @12:26PM (#14998517)
This is one benefit of scoop.sh - it's designed to isolate programs under your user profile, and not mess things up. A bit like using stow/xstow on gnu/bsd.
Re:Critical security updates for Git, Subversion and Mercurial by hungerstrike on Friday August 11, 2017 @09:23AM (#14989363)
Does this vulnerability affect Windows? I don't even think it has an `ssh:` protocol handler.
Re:Critical security updates for Git, Subversion and Mercurial by ssawa on Friday August 11, 2017 @09:52AM (#14989628)
Natively Windows doesn't come with ssh no, but last I used it Git For Windows bundles a bunch of MinGW components, including ssh, which it calls out to.
Re:Critical security updates for Git, Subversion and Mercurial by icc97 on Friday August 11, 2017 @09:55AM (#14989659)
Yep, I'm using that ssh too, it's really nice to have native ssh in Windows.
Re:Critical security updates for Git, Subversion and Mercurial by hdhzy on Friday August 11, 2017 @01:57PM (#14992542)
Git for Windows also ships with ssh-pageant that can use Pageant as key agent. Really useful if someone is using smartcard certificates (PIV, not GPG based).
Re:Critical security updates for Git, Subversion and Mercurial by czechdeveloper on Friday August 11, 2017 @07:26AM (#14988508)
Chocolatey is one of the best thinks that happened to Windows recently. It just makes my life so much simpler.
Re:Critical security updates for Git, Subversion and Mercurial by mdekkers on Friday August 11, 2017 @09:26AM (#14989399)
wow, chocolatey.org looks awesome. Thanks for the link!