From: Junio C Hamano <gitster@pobox.com>
Date: Mon, 16 Nov 2009 21:53:19 GMT
Subject: Re: Manipulating existing revisions by push or pull?
Message-ID: <7vd43innlc.fsf@alter.siamese.dyndns.org>
In-Reply-To: <hdshcm$c06$1@ger.gmane.org>

"Lasse Kliemann" <lasse-gmane-git-2009@mail.plastictree.net> writes:

> Put a different way: consider there is a hostile entity from 
> which I pull or which I allow to push to me. Can this entity 
> fiddle with my history? Can it change the data in existing 
> revisions in my repository? Or can it only make new revisions 
> grow on my side?

If you allow your ref to get updated to an arbitrary value, you are lost,
unless you have signed tags that anchor things in place, in which case you
can trust the part of history that is reachable from them.