[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [tor-talk] git: application level leaks and best practices?



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Ben Tasker wrote:
>>> - Is the timezone included in commit timestamps?
>> Yes.
> 
> You can override this behaviour, but it's not particularly
> convenient to do:
> 
> git commit --date=2015-02-25T01:00:00+0000 -m "fixed it"
> 
> You could probably create an alias within git to save typing,
> though you'd still have to get used to using your new alias. As far
> as I know, there isn't a global option to force this behaviour
> (there is one to force git log to use UTC, but that's not much help
> here)

There is if you use bash (or a similar shell environment):

alias git='TZ=UTC git'

If you only want to force UTC for occasional commands then just add
"TZ=UTC" in front of the command, but I personally prefer redefining
the git command like above, to prevent accidentally forgetting.

str4d

> 
> 
> 
> On Thu, Feb 26, 2015 at 12:24 AM, meejah <meejah@meejah.ca> wrote:
> 
>> Nusenu <nusenu@openmailbox.org> writes:
>> 
>>> Has someone done an analysis of git over Tor already?
>> 
>> Not that I'm aware, but that'd be cool.
>> 
>>> - Is the timezone included in commit timestamps?
>> 
>> Yes.
>> 
>>> - What other (metadata) is potentially leaked?
>> 
>> Beware that there are both committer and author email addresses
>> in commit objects (but typically porcelain commands only show you
>> one of them).
>> 
>> -- meejah -- tor-talk mailing list -
>> tor-talk@lists.torproject.org To unsubscribe or change other
>> settings go to 
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>> 
> 
> 
> 
-----BEGIN PGP SIGNATURE-----
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=Ldm1
-----END PGP SIGNATURE-----
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk