News for hackers. Stuff that matters.
Re:Git security vulnerability announced by tedunangst on Tuesday April 12, 2022 @11:10PM (#31010803)
Or create a mercurial repo that contains a .git directory, and rely on finger memory making them run git immediately after cloning...
Re:Git security vulnerability announced by comex on Tuesday April 12, 2022 @11:56PM (#31011075)
Finger memory, or just a shell configured to run `git status` before every command, as some people have.

And besides a Mercurial repo, it could also be a tarball or zip file…

Quite a dangerous situation.

Re:Git security vulnerability announced by db48x on Tuesday April 12, 2022 @11:50PM (#31011030)
I’ve done that a few times. I’ve typed “git foo” while mentally thinking about “svn foo”, and after a few hours working on a project that still uses svn I will start making the opposite substitution too.
Re:Git security vulnerability announced by kruador on Wednesday April 13, 2022 @05:29AM (#31012670)
We use the grunt build tool. More than a handful of times, I've tried to get grunt to do a merge, or git to build the app.