Slacker News Slacker News logo featuring a lazy sloth with a folded newspaper hat
  • top
  • new
  • show
  • ask
  • jobs
Library

Comment by randomjoe2

6 days ago

Someone using git without github isn't an edge case, it's the default

3 comments

randomjoe2

Reply

gitfan86  5 days ago

Just using git isn't the vulnerability. The vulnerability is that you clone a repo that an attacker was able to put this in. 90% of the time this would happen it would be due to an attacker creating a PR on a public repo.

  • kragen  4 days ago

    Many public repos aren't on GitHub.

    • gitfan86  4 days ago

      Many people use IE 11. Still an edge case.

Slacker News

Product

  • API Reference
  • Hacker News RSS
  • Source on GitHub

Community

  • Support Ukraine
  • Equal Justice Initiative
  • GiveWell Charities