Re:iTerm2 critical security release
by JoBrad on Thursday January 02, 2025 @10:07PM
(#42581893)
Honestly that 7 year old thread makes me glad I use iterm2. George posted a fix in a short period of time (which he still does today), and added comments to that thread addressing the issues. Sounds like a decent person who cares about his users.
[ Parent
| on HN ]
> George posted a fix in a short period of time
No, the issue had been reported on their bug tracker twice (and closed twice) in the two years prior to their response in the thread. It took a loud enough crowd to convince them it was an issue, even though the original reports described the security implications.
https://gitlab.com/gnachman/iterm2/-/issues/3688 and then https://gitlab.com/gnachman/iterm2/-/issues/5303
Still,
> Sounds like a decent person who cares about his users.
Agreed!