3 ms·
> The backdoor was not in the main code in SVN or in Git, which specifically protects against this exact problem Pedant alert, but Subversion doesn't protect a
by ezyang 15y ago
> The backdoor was not in the main code in SVN or in Git, which specifically protects against this exact problem
Pedant alert, but Subversion doesn't protect against malicious manipulation; it doesn't checksum its commits.
- rmccue 15y agoI think that phrase was intended to relate to just Git, although I could be wrong.
- exDM69 15y agoGit uses a lot of hashes but they're for speed, not for security. If you want security from Git, you must cryptographically sign your commits, which is pretty common in big projects.
- lunarscape 15y agoI was specifically referring to Git.