TLDR InfoSec · STRATEGIES & TACTICS
CLONE2LEAK: YOUR GIT CREDENTIALS BELONG TO US
Summary from the TLDR InfoSec newsletter
A security engineer investigating GitHub Desktop discovered a vulnerability in Git's Credential Protocol that could leak user credentials. Further research revealed similar bugs across multiple Git-related projects, stemming from improper message handling in credential helper implementations.