Collaborate Disseminate
What better way to learn to use Git than a gamified interface that visualizes every change? That’s the idea behind Oh My Git! which aims to teach players all about …read more Continue reading Git Good, By Playing a Gamified Version of Git
The actions of certain large social networks have recently highlighted how a small number of people possess significant power over the masses and how this power is sometimes misused. Consequently, …read more Continue reading Radicle: An Open-Source, Peer-to-Peer, GitHub Alternative
I’m doing some development work on an untrusted computer. I’d like to sign my commits I make from it, but I don’t want my personal PGP key to touch this computer. Or maybe I’m using a PGP smart card and I can’t present it to the computer b… Continue reading Is it possible to sign Git commits on a different computer?
I use various Linux machines where I like to sync some config and other important files. This is a security risk, as an intruder on one machine could easily modify some script that would be propagated to the other machines automatically.
T… Continue reading multiple machines sync without single point of failure
If I commit the name of SQLite database in the JDBC SQLite URI in the source code like below, is it possible for an attacker to exploit the URI?
Should I replace the name of the SQLite db with code to retrieve it from environmental variabl… Continue reading Is it safe to keep a JDBC SQLite URI in source code?
GitHub Advanced Security gains AI features, and GitHub Copilot now includes a chatbot option. GitHub Copilot Enterprise is expected in February 2024. Continue reading GitHub Universe: Open Source Trends Report and New AI Security Products
If you spend much time helping people with word processor programs, you’ll find that many people don’t really use much of the product. They type, change fonts, save, and print. …read more Continue reading Linux Fu: Deep Git Rebasing
GitLab’s CISO Josh Lemos on securing CI/CD of software with generative AI tools and how automation enables continuous security in the software development supply chain. Continue reading GitLab’s Lemos: AI, Automation are Key to DevSecOps
If I create a malicious .pdf file and upload it to github, this file can be exploited when processed in a program, right?
What about a .MD file where there is only text? I guess that it can also be exploited if there is a vulnerability in … Continue reading How does github save files?
I’m currently attempting to pentest a web application created by a relation, who wanted me to find vulnerabilities and to let him know what exploits would be possible with said vulnerabilities.
I have discovered the .git folder is publicly… Continue reading Why are certain hashes missing from the .git objects folder?