From: Michal Suchánek <msuchanek@suse.de>
Date: Wed, 15 Apr 2020 09:55:29 GMT
Subject: Re: has anyone bothered to read this "Git is a security risk"?
Message-ID: <20200415095529.GA25468@kitsune.suse.cz>
In-Reply-To: <20200414201701.sacbvbgt6ajde7gp@LykOS.localdomain>

On Tue, Apr 14, 2020 at 04:17:02PM -0400, Santiago Torres Arias wrote:
> On Tue, Apr 14, 2020 at 04:13:39PM -0400, Robert P. J. Day wrote:
> > 
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_blubracket_status_1250123442600513547&d=DwIBAg&c=slrrB7dE8n7gBJbeO0g-IQ&r=yZMPY-APGKyVIX7HgQFZJA&m=k4RlH5EiWlU380Hq8LD-BPM9q79__emrQNq4FBNAbh8&s=7_aq2xl8ld0WDJk4yd_gefOvg47E8MdlXvcj5aZwjug&e= 
> > 
> 
> Yeah,
> 
> Not entirely fond of the phrasing to what reads to me like a
> static-analysis tool (from what I can grok) whitepaper.
> 
> I don't think there's much that can be done in this regard though, no?

There is. Education. Prevention is much more useful than any number of
such tools.

Thanks

Michal