3 ms·
yes they can, but the risk is relative low. SSH-Auth should be only over keypairs,2fa should be on for your account and then most attacks should be unsuccessful
by stop50 4y ago
yes they can, but the risk is relative low.
SSH-Auth should be only over keypairs,2fa should be on for your account and then most attacks should be unsuccessful.
- dev_0 4y agoI bought Yubikey recently. Should be usable
- dev_0 4y agoI will be doomed if there is RCE?
- stop50 4y agoGolang is relative save in case of rces. The only problem is git with its hooks, but you need authentication to do harm. Gitea would rather crash than giving access to the attacker. git server are not really in danger.
- stop50 4y agoUnless you have very private data in your private repos: no if you have your bankaccount password, your ssn or similar important data in your git repos: yes, but its your fault