Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In that case another developer would notice, would get in touch with his fellow developers, they would agree to force push a specific repository condition and all is well and back to normal. There is no need to restore anything from backups or mirrors in that scenario.

So that's an entirely different threat. On the one hand we have FS corruption, which is basically bound to happen and is likely to impact many repositories. On the other hand we have someone (maliciously) force pushing an update on a single repository that throws away all commits.

The first issue is one that needs a backup and restore procedure. The second is one that is at best an inconvenience and at worst a security problem.

Unless you want to include the the worst case scenario someone gaining access to the machine and force pushing such a destructive update on all repos. In that case restoring from developer copies may actually be safer anyway, because the machine and all its backups, be they mirrors or otherwise, may be considered compromised. That's a nightmare for which this discussion about backups is just quibbling.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: