git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: has anyone bothered to read this "Git is a security risk"?

From
Konstantin Ryabitsev <konstantin@linuxfoundation.org>
Date
Apr 14, 2020, 20:35 UTC
Message-ID
<20200414203517.qm55zyu34b7nc75h@chatter.i7.local>
In-Reply-To
<alpine.LFD.2.21.2004141612580.6138@localhost.localdomain>
On Tue, Apr 14, 2020 at 04:13:39PM -0400, Robert P. J. Day wrote:
> 
> https://twitter.com/blubracket/status/1250123442600513547
Summary:
  - Accidental data exfiltration is a problem.
  - So are supply chain attacks.
  - Both of the above can happen with git repos.
  - We sell a scanning tool that will help.
-K
Previous: Michal SuchánekNext: Jason Pyeron
Message 4 of 6 in “has anyone bothered to read this "Git is a security risk"?”
  1. Robert P. J. DayApr 14, 2020
  2. Santiago Torres AriasApr 14, 2020
  3. Michal SuchánekApr 15, 2020
  4. Konstantin RyabitsevApr 14, 2020
  5. Jason PyeronApr 14, 2020
  6. Jason PyeronApr 14, 2020

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.