2 ms·
I personally don't care, its just tiny files, Windows does similar with Thumbs.dll or whatever, I use git for important things which usually adds these files to
by giancarlostoro 2y ago
I personally don't care, its just tiny files, Windows does similar with Thumbs.dll or whatever, I use git for important things which usually adds these files to my git ignore, but apparently sometimes these type of file leaks can lead to websites being hacked, since .DS_Store contains information about files in the current working directory, so if you say, upload a SQL script you use to migrate and it has a root password on it, an attacker might now know where that is on your web server.
- giancarlostoro 2y agoOld hack back in 2009 iirc Here's an article from 2010 https://www.intego.com/mac-security-blog/possible-security-issue-involving-ds_store-files-on-web-servers/ https://www.intego.com/mac-security-blog/possible-security-i... Here's one from 2021 where Microsoft leaked credentials: https://cybernews.com/security/microsoft-vancouver-leaking-website-credentials-via-overlooked-ds-store-file/ https://cybernews.com/security/microsoft-vancouver-leaking-w...
- msephton 2y ago(author here) I go into why I care in the blog post: the files cause various software and devices to misbehave in unfortunate ways.