Hacker News new | ask | show | jobs
by randomjoe2 337 days ago
Someone using git without github isn't an edge case, it's the default
1 comments
gitfan86 337 days ago
Just using git isn't the vulnerability. The vulnerability is that you clone a repo that an attacker was able to put this in. 90% of the time this would happen it would be due to an attacker creating a PR on a public repo.
link
kragen 336 days ago
Many public repos aren't on GitHub.
link
gitfan86 336 days ago
Many people use IE 11. Still an edge case.
link