3 ms·
This doesn't require anyone placing anything deliberately on your machine (as in, needing to exploit it somehow ahead of time). It could be as simple as checkin
by beart 3mo ago
This doesn't require anyone placing anything deliberately on your machine (as in, needing to exploit it somehow ahead of time). It could be as simple as checking out a branch to review, where the author of the branch has added the .exe.
- Xirdus 3mo agoI'd say checking out a malicious branch is in the same category as downloading a malicious attachment. By which I mean, it's kinda on you.
- krater23 3mo agoDownloading this attachement doesn't executes it. Checking out a branch in this case executes the file in the branch. Thats a big difference.
- deleted 3mo ago[deleted]
- dev_daftly 3mo agoIn this case, if you just run a git command yourself it executes the file as well.
- brookst 3mo agoOn windows I guess? On Linux and MacOS you'd need to run ./git to execute a malicious binary in the cloned repo.
- beart 3mo agoOkay... but when "you" is a junior engineer on your team and now you are suddenly spending your entire weekend dealing with malware, it's kinda on you as well.