[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: Re: TortoiseSVN possibly flagged by IT as security risk

From: Alf Christophersen <alf.christophersen_at_medisin.uio.no>
Date: Wed, 05 Mar 2014 11:48:39 +0100

On 2014-03-04 19:39, Trevor Middel wrote:
> Hi Andy,
>
> Thanks for the reply, I was hesitant to ask here as I realize I
> didn't/couldn't provide much detail. I did not receive much in the way
> of information from our ITS group and I'm even unsure still whether it
> was TortoiseSVN which raised the flag. I may find out when the scan is
> complete.
>
> I don't understand the architecture of TortoiseSVN so just asked to
> see if there was an immediate, "Yeah, this us why...." vs "No, that
> makes no sense...". I think I have my answer.
>
> I'm sure our ITS group has aggressive filtering settings, but I can
> understand their position as well. Users can and will do crazy things!
>
>
> I'll have to do some work with them to help identify any issues and
> move forward.

At my work place TortoiseSVN get installed by the IT guys, since we are
not allowed to do it ourselves due to risk of at same time installing
viruses when browsing for things on Internet having the needed Admin
privilegies needed to do an install in a closed environment.

I tend to think that you have had something stored from places
elsewhere which contained viruses or alike, and that when getting the
needed privilegies as temporary admin, your tortoisesvn installation has
been infected by that virus that has just waited for the opportunity to
infect.

Where you have gotten that virus I have no idea, but maybe a home page
you have visited same day (after booting computer)

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3074051

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2014-03-05 11:48:49 CET

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.