Well put. However, I'd add that what sucks even more is that this is not just a kernel issue. Every single application needs to worry about this. In this part

Well put. However, I'd add that what sucks even more is that this is not just a kernel issue. Every single application needs to worry about this. In this particular instance, the vulnerability is caused by git not handling aliased names correctly.