(Oct 12) Git could be made to run programs as your login if it recursivelyopened a malicious git repository.