▲ 7 ▼ Any signed GitHub commit can be copied, without the author's secret key, creating a distinct commit with an identical tree, metadata, a valid signature, and a "Verified" badge (www.internationalcyberdigest.com) submitted 4 months ago by yogthos@lemmy.ml to c/security@lemmy.ml 8 comments fedilink hide all child comments PoC: https://github.com/JakeGinesin/git-chain-malleator
▲ 37 ▼ Any signed GitHub commit can be copied, without the author's secret key, creating a distinct commit with an identical tree, metadata, a valid signature, and a "Verified" badge (www.internationalcyberdigest.com) submitted 4 months ago by cm0002@lemdro.id to c/cybersecurity@infosec.pub 1 comment fedilink hide all child comments PoC: https://github.com/JakeGinesin/git-chain-malleator