3 ms·

Or a bad player buys them and puts some nasty code in those libraries...

• blfr 11y ago
  I downvoted you accidentally, sorry. Exactly, a bad player could do much more damage than simply turn the services off. A lot of the time there is no verification for the downloaded code. It's just being run.
  • pixl97 11y ago
    Yea, if someone at a nation state level manage to fake a cert and redirect BGP, I'm sure they could affect a huge number of systems pretty quickly. Do git clients even do a good job of SSL verification?
    • y4mi 11y ago
      afaik git doesnt do ssl verification. its supposedly being handled by either ssh or libcurl or are you talking about these frontends like source tree, smartgit, ... ?
    • ihsw 11y ago
      China briefly blocked GitHub (for whatever reason) and the tech establishment screamed bloody murder. I cannot even begin to imagine how it would react to it being MITM'd.
• deleted 11y ago
  [deleted]