4 ms·
I just went to the github blog and I see this: ,,GitHub GDC Party 2017''. While security of git is broken, they are partying. Gitlab blog: working on UX Bitbu
by xiphias 10y ago
I just went to the github blog and I see this: ,,GitHub GDC Party 2017''. While security of git is broken, they are partying.
Gitlab blog: working on UX
Bitbucket: branch permissions
All of the teams should handle this issue as an emergency, and at least have a blog entry about their points of view.
- nicky0 10y agoAnd I see you commenting on Hacker News instead of getting important work done.
- ageofwant 10y agoThat may be appropriate if it was an "emergency". It's not.
- xiphias 10y agoLuckily there's a long thread on bitcoin-dev mailing list about how disastorous the consequences can be if somebody is able to change the git-tree because of this attack scenario, so I'm not the only one who thinks that signing only the commit can make billions of dollars worth of damage. And this doesn't take into account that almost all companies use open source software developed on github, so I believe that any remote possibility of adding a malware to open source software is emergency situation.