Re:Git security vulnerability announced
by tedunangst on Tuesday April 12, 2022 @11:10PM
(#31010803)
Or create a mercurial repo that contains a .git directory, and rely on finger memory making them run git immediately after cloning...
[ Parent
| on HN ]
Finger memory, or just a shell configured to run `git status` before every command, as some people have.
And besides a Mercurial repo, it could also be a tarball or zip file…
Quite a dangerous situation.
I’ve done that a few times. I’ve typed “git foo” while mentally thinking about “svn foo”, and after a few hours working on a project that still uses svn I will start making the opposite substitution too.