Hacker News new | ask | show | jobs
by factorialboy 64 days ago
All I did was install GitButler via my OS's package manager, and open a local repo via the GUI.

And I saw these malicious (pre-commit) git hooks installed by GitButler, without any confirmation, or prompt seeking my approval.

I'm sure you folks will come up with a "technical explanation" or some "legal-marketing language" to cover up for this — but in my book — redirect `git commit` to `but commit` is dishonest and unethical.

1 comments

You keep using the word malicious, what do you mean? What is the malice?
Yeah it feels malicious if it doesn't tell you it's going to do that, like a sneaky lock-in
Silently replacing Git with `but`.