3 ms·
I'd say checking out a malicious branch is in the same category as downloading a malicious attachment. By which I mean, it's kinda on you.
by Xirdus 3mo ago
I'd say checking out a malicious branch is in the same category as downloading a malicious attachment. By which I mean, it's kinda on you.
- krater23 3mo agoDownloading this attachement doesn't executes it. Checking out a branch in this case executes the file in the branch. Thats a big difference.
- deleted 3mo ago[deleted]
- dev_daftly 3mo agoIn this case, if you just run a git command yourself it executes the file as well.
- brookst 3mo agoOn windows I guess? On Linux and MacOS you'd need to run ./git to execute a malicious binary in the cloned repo.
- beart 3mo agoOkay... but when "you" is a junior engineer on your team and now you are suddenly spending your entire weekend dealing with malware, it's kinda on you as well.