On: Git: Malicious repositories can execute remote cod...

[enneff]

And the guy who announced the new Git release works for Google, but uses his pobox.com email for Git development.

[skzv → enneff]

Yes, actually, Googlers are encouraged to use their personal Github accounts.

[enneff → skzv]

That is true but the git release has nothing to do with GitHub accounts.

[saagarjha → skzv]

But probably their work email when doing things on company time?

[enneff → saagarjha]

Nope. This is an example of someone working on company time using their personal email.

[saagarjha → enneff]

Right, which is (AFAIK) not usually recommended except for side projects or ones where there is already an existing relationship under a personal email address.