3 ms·
I downvoted you accidentally, sorry. Exactly, a bad player could do much more damage than simply turn the services off. A lot of the time there is no verificat
by blfr 11y ago
I downvoted you accidentally, sorry.
Exactly, a bad player could do much more damage than simply turn the services off. A lot of the time there is no verification for the downloaded code. It's just being run.
- pixl97 11y agoYea, if someone at a nation state level manage to fake a cert and redirect BGP, I'm sure they could affect a huge number of systems pretty quickly. Do git clients even do a good job of SSL verification?
- y4mi 11y agoafaik git doesnt do ssl verification. its supposedly being handled by either ssh or libcurl or are you talking about these frontends like source tree, smartgit, ... ?
- ihsw 11y agoChina briefly blocked GitHub (for whatever reason) and the tech establishment screamed bloody murder. I cannot even begin to imagine how it would react to it being MITM'd.