Remote code execution, git, and OS X
So... to try and get an answer to the unanswered question in the blogpost. The files are probably hardlinks to a single &quot;superbinary&quot; image somewhere. The actual code is probably checking the value of argv[0] to dispatch to the actual git code (or whatever command name was invoked). The question is, why is Apple doing this? Is it some sort of diskspace saving scheme (to avoid duplicating common boilerplate code)? I suspect some part of this answer includes the words &quot;for security&quot; but it&#x27;s already been proven to be BS at this point.