Collaborate Disseminate
If an attacker gains full write access to an arbitrary branch in a Git repository, which technical attacks could they perform to compromise the integrity or availability of the data in the master branch?
This is assuming tha… Continue reading What can an attacker do with access to a compromised Git branch?
A study performed by the non-profit American Consumer Institute (ACI) Center for Citizen Research revealed that the majority of home routers have tens of known vulnerabilities. For its research, the ACI used a scanner called Insignary Clarity, which c… Continue reading Study: Most Home Routers Have Unpatched Vulnerabilities
Atlassian’s Jira has become a standard for managing large software projects in many companies. Many of those same companies also use GitHub as their source code repository and, unsurprisingly, there has long been an official way to integrate the two. That old way, however, was often slow, limited in its capabilities and unable to cope […] Continue reading GitHub gets a new and improved Jira Software Cloud integration
Many online Git hosting services (such as GitHub and GitLab) allow you to ‘protect’ certain branches so that only project administrators can modify them.
The purpose of this is to allow non-admin contributors to work in othe… Continue reading How can I improve the security of my protected branches in GitHub/GitLab?
For most developers “distributed version control” probably means git. But by itself git doesn’t work very well with binary files such as images, zip files and the like because git doesn’t know how to make sense of the structure of an arbitrary blobs of bytes. So when trying to figure out how to track changes in design files created by most EDA tools git doesn’t get the nod and designers can be trapped in SVN hell. It turns out though KiCAD’s design files may not have obvious extensions like .txt, they are fundamentally text files (you might know that if …read more
Continue reading Advanced Techniques For Using Git With KiCAD
GitLab, the developer service that aims to offer a full lifecycle DevOps platform, today announced that it has raised a $100 million Series D funding round at a valuation of $1.1 billion. The round was led by Iconiq. As GitLab CEO Sid Sijbrandij told me, this round, which brings the company’s total funding to $145.5 million, will […] Continue reading GitLab raises $100M
When writing software a key part of the development workflow is looking at changes between files. With version control systems this process can get pretty advanced, letting you see changes between arbitrary files and slices in time. Tooling exists to do this visually in the world of EDA tools but it hasn’t really trickled all the way down to the free hobbyist level yet. But thanks to open and well understood file formats [jean-noël] has written plotgitsch to do it for KiCAD.
In the high(er)-end world of EDA tools like OrCAD and Altium there is a tight integration between the …read more
Continue reading Visual Schematic Diffs in KiCAD Help Find Changes
An exhaustive scan shows hundreds of thousands of websites potentially exposing sensitive data such as database passwords, API keys and so on. Continue reading Open .Git Directories Leave 390K Websites Vulnerable
I have a website which commits to a git local repository all the changes done.
I need to automatically push them directly from the web server to a remote Bitbucket repository.
The authentication method I use to do it is by … Continue reading Automatic push on commit (on bitbucket repository)
I was looking up on the web about repository breach attacks on source code repository for some popular software repositories. I found many popular ones (Adobe, Linux, bitcoin etc.) have been compromised in past. However, on f… Continue reading Source Code breach instances