Git: Malicious repositories can execute remote code while cloning
1–10 of 228 posts
Re: Git: Malicious repositories can execute remote code while cloning
#2> This vulnerability affects platforms with case-insensitive filesystems...
What kind of platforms use case-insensitive filesystems?
Re: Git: Malicious repositories can execute remote code while cloning
#3> This vulnerability affects platforms with case-insensitive filesystems... What kind of platforms use case-insensitive filesystems?
macOS, to name one. It appears NTFS is also vulnerable according to the posting.
Re: Git: Malicious repositories can execute remote code while cloning
#4> This vulnerability affects platforms with case-insensitive filesystems... What kind of platforms use case-insensitive filesystems?
[deleted]
Re: Git: Malicious repositories can execute remote code while cloning
#5> This vulnerability affects platforms with case-insensitive filesystems... What kind of platforms use case-insensitive filesystems?
MacOS and Windows
Re: Git: Malicious repositories can execute remote code while cloning
#6> if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS)
What is the simple test for whether this is the case or not?
Is this a default-on scenario?
Re: Git: Malicious repositories can execute remote code while cloning
#7> This vulnerability affects platforms with case-insensitive filesystems... What kind of platforms use case-insensitive filesystems?
[deleted]
Re: Git: Malicious repositories can execute remote code while cloning
#8> This vulnerability affects platforms with case-insensitive filesystems... What kind of platforms use case-insensitive filesystems?
macOS, to name one. It appears NTFS is also vulnerable according to the posting.
Ashamed to admit (as an OSX user) that I didn't even realize the FS was case-insensitive (having migrated from years of Linux usage to a non-Linux desktop). It does a good job of hiding this from the user (filenames are still listed with cases, and bash autocompletion completes to the correct case as well)
Re: Git: Malicious repositories can execute remote code while cloning
#9Re: Git: Malicious repositories can execute remote code while cloning
#10> This vulnerability affects platforms with case-insensitive filesystems... What kind of platforms use case-insensitive filesystems?
[deleted]