git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Question about scm security holes

From
John Tapsell <johnflux@gmail.com>
Date
Mar 5, 2010, 03:00 UTC
Message-ID
<43d8ce651003041900x66000be4s9a15ab0cde3a0fe7@mail.gmail.com>
In-Reply-To
<32541b131003041803q9abf6baq4cf9ffcca990b51c@mail.gmail.com>
On 5 March 2010 02:03, Avery Pennarun <apenwarr@gmail.com> wrote:
> modified code would be a little more interesting.  git makes this sort
> of thing pretty much impossible to do without it being *noticeable* at
> least.  Traceable, not so much, because you can create a commit with
> whatever committer/author names you want and then push them in.
Which is why you simply record the username of whoever pushed them in.
 This is what gitorious.org does etc.
John
Previous: Avery PennarunNext: Avery Pennarun
Message 3 of 13 in “Question about scm security holes”
  1. waltMar 4, 2010
  2. Avery PennarunMar 5, 2010
  3. John TapsellMar 5, 2010
  4. Avery PennarunMar 5, 2010
  5. John TapsellMar 5, 2010
  6. waltMar 5, 2010
  7. Avery PennarunMar 5, 2010
  8. Andreas KreyMar 5, 2010
  9. Johannes SchindelinMar 5, 2010
  10. Jakub NarebskiMar 5, 2010
  11. Avery PennarunMar 5, 2010
  12. Johannes SchindelinMar 5, 2010
  13. Daniel BarkalowMar 5, 2010

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.