git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: has anyone bothered to read this "Git is a security risk"?

From
Michal Suchánek <msuchanek@suse.de>
Date
Apr 15, 2020, 09:55 UTC
Message-ID
<20200415095529.GA25468@kitsune.suse.cz>
In-Reply-To
<20200414201701.sacbvbgt6ajde7gp@LykOS.localdomain>
On Tue, Apr 14, 2020 at 04:17:02PM -0400, Santiago Torres Arias wrote:
Show 11 quoted lines
> On Tue, Apr 14, 2020 at 04:13:39PM -0400, Robert P. J. Day wrote:
> > 
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_blubracket_status_1250123442600513547&d=DwIBAg&c=slrrB7dE8n7gBJbeO0g-IQ&r=yZMPY-APGKyVIX7HgQFZJA&m=k4RlH5EiWlU380Hq8LD-BPM9q79__emrQNq4FBNAbh8&s=7_aq2xl8ld0WDJk4yd_gefOvg47E8MdlXvcj5aZwjug&e= 
> > 
> 
> Yeah,
> 
> Not entirely fond of the phrasing to what reads to me like a
> static-analysis tool (from what I can grok) whitepaper.
> 
> I don't think there's much that can be done in this regard though, no?

There is. Education. Prevention is much more useful than any number of such tools.

Thanks
Michal
Previous: Santiago Torres AriasNext: Konstantin Ryabitsev
Message 3 of 6 in “has anyone bothered to read this "Git is a security risk"?”
  1. Robert P. J. DayApr 14, 2020
  2. Santiago Torres AriasApr 14, 2020
  3. Michal SuchánekApr 15, 2020
  4. Konstantin RyabitsevApr 14, 2020
  5. Jason PyeronApr 14, 2020
  6. Jason PyeronApr 14, 2020

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.