2 ms·
If somebody inserts random odd generated crud in the middle of your source code, you will absolutely notice Unless I'm misunderstanding how this would work in
by stinos 10y ago
If somebody inserts random odd generated crud in the middle of your source code, you will absolutely notice
Unless I'm misunderstanding how this would work in practice (I assume commits being added under my name or existing commits being modified?), I'm abolutely not buying that though. Way too general, no? I would likely notice something like that, but I know enough colleagues who are just as likely to not notice. Mostly because they don't fully grasp git so they're just like 'hmm, thing says I'm behind, ha I know the fix is pull, yes I'm a git wizard' and just pull then continue working without even checking what got changed.
- ProblemFactory 10y agoSure, most people don't review all the code that they pull. But if you are in a position to insert "garbage data" into a commit in preparation for an attack, it will be much easier to insert malicious but safe-looking code in the first place. Omit an array bounds check, disable SSL certificate validation, or anything else that looks like a mistake but will allow you to compromise the running code later.