3 ms·
> Also the OP seemingly implies credentials are stored on-filesystem in plaintext but I might be extrapolating too much there. To be fair, some tools only supp
by c0balt 10mo ago
> Also the OP seemingly implies credentials are stored on-filesystem in plaintext but I might be extrapolating too much there.
To be fair, some tools only support a netrc file for http(s) based auth. Regardless, if you want to use git via http this vector exists almost always.
- woodruffw 10mo agoSerious question: what tools only support netrc for authentication? I'm aware of lots of tools that (unfortunately IMO) support netrc as a source of credentials, but I can't think of a single one that requires it.
- c0balt 10mo agoAfaik, nix for https-based git(hub/lab/...) repositories and http-auth protected resources (via fetchurl and friends).