"Otherwise, an unsuspecting user can run git pull from an innocuous-looking-but-malicious repository and have the meta-information in her repository overwritten

"Otherwise, an unsuspecting user can run git pull from an innocuous-looking-but-malicious repository and have the meta-information in her repository overwritten, or executable hooks installed by the owner of that repository she pulled from (i.e. an attacker)." [1] You could pull down git hooks that root your box, pretty intense hack, update now! 1. http://git-blame.blogspot.com.es/2014/12/git-1856-195-205-214-and-221-and.html http://git-blame.blogspot.com.es/2014/12/git-1856-195-205-21...