Their UI is far better at it than the git tool itself. You have to explicitly te... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

jfrunyon on Nov 5, 2020 | parent | context | favorite | on: GitHub Source Code Leak

Their UI is far better at it than the git tool itself. You have to explicitly tell git to check signatures (not to mention needing to go get people's keys and verify that they're correct, which GitHub does for you).

emidoots on Nov 5, 2020 [–]

While that is true, I'm not sure anybody could be successful at a phishing attack carried out through the git CLI.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact