News for hackers. Stuff that matters.

A comment on Malicious code added to 35k GitHub repos, leaking user environments. Parent comment

Re:Malicious code added to 35k GitHub repos, leaking user en... by stevelacy on Wednesday August 03, 2022 @02:28AM (#32328307)
Good to know, I was not aware. The squash/rebase issue is definitely problematic, though a tree of signatures could be appended to each commit. Now... this does break how commits are currently signed.
[ Parent | on HN ]
Re:Malicious code added to 35k GitHub repos, leaking user en... by eurasiantiger on Wednesday August 03, 2022 @02:50AM (#32328446)
Would this be a problem if commits were stored in a blockchain? Rebase would effectively fork the chain.
[ Parent | on HN ]
Re:Malicious code added to 35k GitHub repos, leaking user en... by pilif on Wednesday August 03, 2022 @02:53AM (#32328460)
a git repo is practically a blockchain. Fixing this will require how git treats signatures, but no additional parallel architecture needs to be created.
[ Parent | on HN ]