3 ms·
If a script or cronjob or whatever on the server has write access to the repo, so does the hypothetical attacker. I remember seeing a "hacking" website get wip
by brobinson 10y ago
If a script or cronjob or whatever on the server has write access to the repo, so does the hypothetical attacker.
I remember seeing a "hacking" website get wiped along with all of its backups about 15 years ago and it left a very strong impression on me regarding this issue.
- jjnoakes 10y agoIf it is write access but not delete access (nor overwrite access) then there is no issue. It is sometimes more secure to push because it requires no inbound connections or authorizations the live machine.