Re:Git: Malicious repositories can execute remote code while...
by rhinoceraptor on Tuesday March 09, 2021 @05:22PM
(#26405192)
MacOS and Windows
[ Parent
| on HN ]
Re:Git: Malicious repositories can execute remote code while...
by cma on Tuesday March 09, 2021 @05:46PM
(#26405483)
In windows, the underlying ntfs is still case sensitive, and that gets made use of with the WSL 1.0 stuff.
Re:Git: Malicious repositories can execute remote code while...
by chungy on Tuesday March 09, 2021 @06:13PM
(#26405743)
Before Windows XP, any application could open a file with a case-sensitive flag to request the operating system to not do any case folding. Starting with XP, the same feature exists but requires a registry key set (and a reboot) to instruct the kernel to allow case-sensitive operations.
Starting with Windows 10, the aforementioned key still works, but there's also a per-directory case-sensitive flag that forces all DOS and Windows programs to have case-sensitive operations unconditionally. This is made to great effect in both WSL1 and Cygwin.
Re:Git: Malicious repositories can execute remote code while...
by jolmg on Tuesday March 09, 2021 @05:25PM
(#26405221)
I guess it shows that I haven't really used either of those in a long time.
Re:Git: Malicious repositories can execute remote code while...
by Jtsummers on Tuesday March 09, 2021 @05:40PM
(#26405417)
macOS has defaulted to be case insensitive largely due to historical and perhaps usability reasons. You can opt to make it case sensitive (and I do, which broke Steam for several years but that also freed my time).
Re:Git: Malicious repositories can execute remote code while...
by emodendroket on Tuesday March 09, 2021 @09:21PM
(#26407022)
When necessary you can make an auto-expanding volume that's case-sensitive and leave your host FS alone. I have not found that I really want to have differently-cased but otherwise identical filenames in the real world at any point though.
Re:Git: Malicious repositories can execute remote code while...
by dhosek on Wednesday March 10, 2021 @12:19AM
(#26408067)
Ages ago, I heard from co-workers at a company that I had left that there was an issue because of some file-naming in a PHP application that they were trying to run locally on a Mac. There was foo.php which was the interface and Foo.php which had a class definition in it.
What idiot would name files like that? I said.
You, they answered.
I don't do that sort of thing anymore.
Re:Git: Malicious repositories can execute remote code while...
by earthboundkid on Wednesday March 10, 2021 @10:39AM
(#26412341)
A bug that affects my teams once every few years is a developer will create a file named "A.txt" check it into Git, realize it should be "a.txt" and rename it, and then basically everything will shit the bed and you waste a day figuring out why nothing is working.
A related bug is a developer will make a webpage called /a/ but link to /A/ and then the link will be broken in production. At this point, I have seen this same bug enough times to be able to fix it reasonably quickly, but it definitely wastes time for the team.
Re:Git: Malicious repositories can execute remote code while...
by emodendroket on Wednesday March 10, 2021 @11:03AM
(#26412632)
Yeah, my current company encourages development in a case-sensitive volume and I assume this is why. But this is more an issue of your development environment working differently than prod than a problem with the notion of case insensitivity per se.