Browse Source
Any attacker who managed to make an evil commit that changed something in the contrib/verify-commits/ directory could just as easily remove the warning and/or modify it to not display the evil commits; telling the user to check those commits specifically misleads them into checking just those commits rather than the script itself.0.13
Peter Todd
9 years ago
1 changed files with 0 additions and 3 deletions
Loading…
Reference in new issue