Re: has anyone bothered to read this "Git is a security risk"?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: has anyone bothered to read this "Git is a security risk"?
From: Konstantin Ryabitsev <konstantin@xxxxxxxxxxxxxxxxxxx>
Date: Tue, 14 Apr 2020 16:35:17 -0400
Cc: Git Mailing list <git@xxxxxxxxxxxxxxx>
In-reply-to: <alpine.LFD.2.21.2004141612580.6138@localhost.localdomain>
Mail-followup-to: "Robert P. J. Day" <rpjday@xxxxxxxxxxxxxx>, Git Mailing list <git@xxxxxxxxxxxxxxx>
References: <alpine.LFD.2.21.2004141612580.6138@localhost.localdomain>

On Tue, Apr 14, 2020 at 04:13:39PM -0400, Robert P. J. Day wrote:
> 
> https://twitter.com/blubracket/status/1250123442600513547

Summary:

  - Accidental data exfiltration is a problem.
  - So are supply chain attacks.
  - Both of the above can happen with git repos.
  - We sell a scanning tool that will help.

-K

References:
- has anyone bothered to read this "Git is a security risk"?
  - From: Robert P. J. Day

Prev by Date: Re: has anyone bothered to read this "Git is a security risk"?
Next by Date: Re: rebase backend change interaction with rebase.abbreviateCommands and autostash
Previous by thread: Re: has anyone bothered to read this "Git is a security risk"?
Next by thread: RE: has anyone bothered to read this "Git is a security risk"?
Index(es):
- Date
- Thread

[Index of Archives] [Linux Kernel Development] [Gcc Help] [IETF Annouce] [DCCP] [Netdev] [Networking] [Security] [V4L] [Bugtraq] [Yosemite] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Linux SCSI] [Fedora Users]

Powered by Linux