top | item 44515859

(no title)

gitfan86 | 7 months ago

Just using git isn't the vulnerability. The vulnerability is that you clone a repo that an attacker was able to put this in. 90% of the time this would happen it would be due to an attacker creating a PR on a public repo.

discuss

order

kragen|7 months ago

Many public repos aren't on GitHub.

gitfan86|7 months ago

Many people use IE 11. Still an edge case.