summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGravatar achilleas.k@14be77d42a1252fab5ec9dbf4e5ea03c5833e8c8 <achilleask@web>2017-04-26 16:36:22 +0000
committerGravatar admin <admin@branchable.com>2017-04-26 16:36:22 +0000
commit42bf047ea9b0056ee0a143b943b472bd92fa170d (patch)
treecb7214b9b4e13c81f34d23737abec1fe6f4f52d0
parenteec394aa74e7a5baa1e677976a0331a6532bf7aa (diff)
-rw-r--r--doc/forum/Malicious_autoenabled_remotes.mdwn2
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/forum/Malicious_autoenabled_remotes.mdwn b/doc/forum/Malicious_autoenabled_remotes.mdwn
index 274d5c215..8e8ff1883 100644
--- a/doc/forum/Malicious_autoenabled_remotes.mdwn
+++ b/doc/forum/Malicious_autoenabled_remotes.mdwn
@@ -2,4 +2,4 @@ I've been trying to figure out whether git-annex can be used to make a user unkn
*Is it possible, when performing (for example) `git clone git@trustedserver:user/repo && cd repo && git annex init` for annex to set up and enable a remote that is **not** on `trustedserver`?*
-I'm trying to imagine a scenario where someone with access to the repository (a person who I share files with) can set up a remote to a different server (e.g., `badremote`), set it to `autoenable=true`, and sync changes. Would this enable the other user to put files on `badremote` that are not on `trustedserver` but are tracked by annex? More importantly, if this happens and I perform a `git clone` -> `git annex init` -> `git annex sync --content`, would I be downloading files from `badremote` without specifically enabling it?
+I'm trying to imagine a scenario where someone with access to the repository (a person who I share files with) can set up a remote to a different server (e.g., `badremote`), set it to `autoenable=true`, and sync changes. Would this enable the other user to put files on `badremote` that are not on `trustedserver` but are tracked by annex? More importantly, if this happens and I perform a `git clone` → `git annex init` → `git annex sync --content`, would I be downloading files from `badremote` without specifically enabling it?