News for hackers. Stuff that matters.
Re:Malicious code added to 35k GitHub repos, leaking user en... by formerly_proven on Wednesday August 03, 2022 @03:12AM (#32328572)
Git is a content-addressed object store, the address of any stored object is the hash of the object itself. So you actually can't stuff extra data into an object and not change its ID; this auxiliary data would need to go in a separate store indexed by object ID or a similar solution. The reason why file access times don't affect git hashes is because git does not store them.

There are no comments on this comment yet.