4 ms·
I think this is pretty well known. You could always sign your commits if you're really worried about someone sticking your email address in their git config.
by wcummings 11y ago
I think this is pretty well known. You could always sign your commits if you're really worried about someone sticking your email address in their git config.
- stephengillie 11y agoI feel as though a GIT demo somewhere has already shown me how to impersonate Linus or anyone else.
- wcummings 11y agoYeah, I've definitely seen something very similar, as well.
- rabbyte 11y agoWhile it's probably well known from a command line perspective, I doubt it's well known from a web service (GitHub) perspective. I have a healthy distrust of git logs but trusting a photo and username on GitHub is a pattern reinforced by every other social app.
- berdario 11y agoNot only it's not well known, but it breaks them: some years ago I reported this issue on gitorious, which yielded an HTTP500 when the repository contained a signed commit: https://issues.gitorious.org/issues/193 https://issues.gitorious.org/issues/193 (it's now down, but hopefully it'll reappear on archive.org) and it'll prevent Launchpad from automatically mirroring git repositories (which is paramount to be able to automatically update PPA with recipes) https://bugs.launchpad.net/bzr-git/+bug/1372149 https://bugs.launchpad.net/bzr-git/+bug/1372149
- wcummings 11y agoI've seen this demonstrated on github before w/ defunkt's account/email
- andrewstuart2 11y agoIt does give a strong impression of authority that said user did indeed author a commit. Especially being a link to that user's profile.