3 ms·
See this[0] for an example of just how bad GitHub's UI is at presenting impersonated commits. [0] https://news.ycombinator.com/item?id=24977398 https://news.yc
by slimsag 6y ago
See this[0] for an example of just how bad GitHub's UI is at presenting impersonated commits.
[0] https://news.ycombinator.com/item?id=24977398 https://news.ycombinator.com/item?id=24977398
- jfrunyon 6y agoTheir UI is far better at it than the git tool itself. You have to explicitly tell git to check signatures (not to mention needing to go get people's keys and verify that they're correct, which GitHub does for you).
- slimsag 6y agoWhile that is true, I'm not sure anybody could be successful at a phishing attack carried out through the git CLI.