Re:Remote code execution in Homebrew by compromising the off...
by tingletech on Saturday April 24, 2021 @11:50AM
(#26925802)
I can't find it either; but the post I remember was from someone from homebrew. IIRC, homebrew used to do a shallow clone (the first time it ran everyday, or something like that) of the repo with all the taps and casks or whatever is in it. A big old git repo. I think github asked them to change homebrew, and they fixed so that it uses the regular git commands vs trying to get tricky and do a shallow clone.
[ Parent
| on HN ]
There are no comments on this comment yet.