**see shy jo** @joeyh@octodon.social · May 30, 2018, 14:54

**see shy jo** @joeyh@octodon.social · May 30, 2018, 14:54

see shy jo @joeyh@octodon.social

So, it's now possible to create a legitimate git repository that Github will refuse to let be pushed to it. The repository is completely safe as long as users are keeping current with security fixes.

This seems to have some interesting applications on the "no I don't accept the Github TOS" front.

**Lars Wirzenius** @liw · May 30, 2018, 17:53

**Lars Wirzenius** @liw · May 30, 2018, 17:53

@joeyh Would you have a link to something that explains the details?

**n8, 9 characters left** @n8@mastodon.social · Jun 01, 2018, 15:08

**n8, 9 characters left** @n8@mastodon.social · Jun 01, 2018, 15:08

@liw @joeyh I was wondering the same thing....

**see shy jo** @joeyh@octodon.social · Jun 01, 2018, 15:12

**see shy jo** @joeyh@octodon.social · Jun 01, 2018, 15:12

@n8 @liw git has a config option to prevent receiving objects that could be CVE-2018-11235 exploits. Or could just look enough like one.

So, git objects that were legal before are not now, which is an interesting development in a version control system.

**Lars Wirzenius** @liw · 2018-06-01T15:33:23Z

Lars Wirzenius @liw

@joeyh @n8 Interesting.

Jun 01, 2018, 15:33 · Web · 0 · 0