Git: Malicious repositories can execute remote code while cloning

Re:Git: Malicious repositories can execute remote code while... by de6u99er on Tuesday March 09, 2021 @09:57PM (#26407228)

Strange. The guy who fixed the issue works at Microsoft, but uses his gmx email for Github.

[ Parent | on HN ]

Re:Git: Malicious repositories can execute remote code while... by enneff on Tuesday March 09, 2021 @11:27PM (#26407765)

And the guy who announced the new Git release works for Google, but uses his pobox.com email for Git development.

[ Parent | on HN ]

Re:Git: Malicious repositories can execute remote code while... by skzv on Wednesday March 10, 2021 @04:29AM (#26409448)

Yes, actually, Googlers are encouraged to use their personal Github accounts.

[ Parent | on HN ]

Re:Git: Malicious repositories can execute remote code while... by enneff on Wednesday March 10, 2021 @04:07PM (#26416272)

That is true but the git release has nothing to do with GitHub accounts.

[ Parent | on HN ]

Re:Git: Malicious repositories can execute remote code while... by saagarjha on Wednesday March 10, 2021 @04:51AM (#26409596)

But probably their work email when doing things on company time?

[ Parent | on HN ]

Re:Git: Malicious repositories can execute remote code while... by enneff on Wednesday March 10, 2021 @04:06PM (#26416252)

Nope. This is an example of someone working on company time using their personal email.

[ Parent | on HN ]

Re:Git: Malicious repositories can execute remote code while... by saagarjha on Thursday March 11, 2021 @05:09AM (#26422324)

Right, which is (AFAIK) not usually recommended except for side projects or ones where there is already an existing relationship under a personal email address.

[ Parent | on HN ]

Re:Git: Malicious repositories can execute remote code while... by eru on Tuesday March 09, 2021 @11:10PM (#26407665)

I think you just got a glimpse of a vast sea of internal policy and compliance issues.

[ Parent | on HN ]

Re:Git: Malicious repositories can execute remote code while... by balp on Wednesday March 10, 2021 @12:00AM (#26407946)

Or that the opensource hobby is much more longlived that something as temporary as an employer.

[ Parent | on HN ]

Re:Git: Malicious repositories can execute remote code while... by skrebbel on Wednesday March 10, 2021 @01:28AM (#26408420)

Wait, there are people who use real, in-use email addresses in publicly hosted git repos? I mean, it's likely his spamcatcher address, no?

[ Parent | on HN ]