Re:Git security vulnerability announced
by nybble41 on Wednesday April 13, 2022 @02:17PM
(#31018219)
The source machine may not be set up as a server, or you may not have an account there. Sending a .zip file could be simpler than pushing the repo to a third system the receiver does have access to.
[ Parent
| on HN ]
Re:Git security vulnerability announced
by seba_dos1 on Wednesday April 13, 2022 @08:07PM
(#31021893)
Sure, mailing binaries can also be the right thing sometimes, but just as with git repos, you definitely shouldn't be taking them from untrusted sources.
(and I bet that many people don't even realize how easy using `git push` to mirror a repo actually is, since git is very commonly used in a centralized fashion)