4 ms·Git is insecure by default11 points by doki_pen 11y agodoki_pen 11y agoWhat this means is git doesn't make sure that blobs match shas on fetch. Malicious control of source or network can insert nasty things and git won't notice. Solution is setting transfer.fsckobjects = true.noselasd 11y agoAny good reason this isn't the default ?