Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It's not executing untrusted code, it's calling git when you have a malicious version of git on your system


No, read the report. It will call an executable called git.exe in the untrusted repo.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: