Live data from Hacker News

Git security vulnerability announced

301–302 of 302 posts

Re: Git security vulnerability announced

#301

Post by antihero » Fri, Apr 15, 2022, 10:38 PM UTC

rswail wrote: post #198

rvwaveren wrote: post #175

Question for Mac users. Apple installs git with its command line tools and is currently at version 2.32. Is it wise to install git via Homebrew so that you can upgrade faster? Or are there some benefits from apple-git?

I use the macports version. As far as I am aware, there are no advantages to using the Apple version.

Out of interest any reason to select macports over brew? Since I started using mac brew seemed like the done thing

Re: Git security vulnerability announced

#302

Post by slavik81 » Fri, Apr 22, 2022, 6:36 PM UTC

db48x wrote: post #244

slavik81 wrote: post #168

Earlier quoted context omitted.

Just about anybody that uses docker and mounts a volume is going to have multiple users accessing their files, even if there's only one real user.

Not exactly. Inside the docker container, the files you have bind–mounted will be owned by the same user who runs the git binary. You’ll never even notice the security check.

Today I'm sitting here staring at a 'fatal: unsafe repository warning' in my local workspace in docker and can tell you definitively that I have noticed.

This change broke a lot of workflows.

Post reply on HN