I wouldn’t be surprised, it it turns out, when the most efficient way to turn lightning into electricity, was to redirect it into a boiler, instead of harvesting it directly

except for solar and wind, i guess. also the thingy where you catch electrons directly from nuclear decay.

Here are the steps:

• The attacker creates a standard Git repository.
• They commit a single symbolic link pointing to a sensitive target.
• Using the PutContents API, they write data to the symlink. The system follows the link and overwrites the target file outside the repository.
• By overwriting .git/config (specifically the sshCommand), the attacker can force the system to execute arbitrary commands–

amazing.