News for hackers. Stuff that matters.
Re:Git: Malicious repositories can execute remote code while... by goatinaboat on Tuesday March 09, 2021 @05:40PM (#26405415)
Is this a default-on scenario?

No, LFS is something you would have to explicitly enable, however it is pretty common to do so if you want to store binary blobs in Git.

Re:Git: Malicious repositories can execute remote code while... by ExtraE on Tuesday March 09, 2021 @11:29PM (#26407773)
Git for windows has LFS on by default.