News for hackers. Stuff that matters.

A comment on Git security vulnerability announced. Parent comment

Re:Git security vulnerability announced by kazinator on Thursday April 14, 2022 @01:59PM (#31030710)
There are far more likely accidents that the superuser can perpetrate, that we do not compensate for with silly logic in applications.

Superuser could download some malware and put it into the system PATH. OK, so let's not execute anything in the PATH, unless it is owned by us.

/bin/ls? Not owned by me, don't trust it.

[ Parent | on HN ]
Re:Git security vulnerability announced by hsbauauvhabzb on Thursday April 14, 2022 @04:39PM (#31032971)
Okay.
[ Parent | on HN ]