News for hackers. Stuff that matters.

A comment on Git: Malicious repositories can execute remote code while cloning. Parent comment

Re:Git: Malicious repositories can execute remote code while... by dragonwriter on Tuesday March 09, 2021 @09:28PM (#26407059)
Doesn't Git-for-Windows default configure symbolic link support off, though? Or does this exploit work even in that case as long as the underlying file system supports symlinks?
[ Parent | on HN ]
Re:Git: Malicious repositories can execute remote code while... by matheust on Tuesday March 09, 2021 @10:47PM (#26407530)
Git-for-Windows may turn symlink support on by default under some specific circumstances. As the repo's wiki [1] says:

Short version: there is no exact equivalent for POSIX symlinks on Windows, and the closest thing is unavailable for non-admins by default unless Developer Mode is enabled and a relatively recent Windows 10 version is used. Therefore, symlink emulation support is only turned on by default when that scenario is detected.

[1]: https://github.com/git-for-windows/git/wiki/Symbolic-Links

[ Parent | on HN ]