News for hackers. Stuff that matters.

A comment on Git Legit. Parent comment

Re:Git Legit by habosa on Friday January 18, 2013 @08:47PM (#5082265)
Is this a vulnerability in some way? Like could I replace someone's git-add binary to expose private source code? It scares me that someone can change my git behavior so easily.
[ Parent | on HN ]
Re:Git Legit by skymt on Friday January 18, 2013 @09:01PM (#5082296)
If someone can replace your `git-add` binary or put their own in a directory earlier in your $PATH, they can do the same with `git`, `ls` or any other program.
[ Parent | on HN ]
Re:Git Legit by zck on Friday January 18, 2013 @09:05PM (#5082307)
If someone's running an executable you give them without knowing what it actually is, their security is already lost. So yeah, that's a problem, but nothing specific to Legit or git.
[ Parent | on HN ]
Re:Git Legit by hcarvalhoalves on Friday January 18, 2013 @09:03PM (#5082300)
How is that any different than replacing any other binary in your filesystem?
[ Parent | on HN ]