Re: Manipulating existing revisions by push or pull?

"Lasse Kliemann" [off-list ref] writes:

Put a different way: consider there is a hostile entity from 
which I pull or which I allow to push to me. Can this entity 
fiddle with my history? Can it change the data in existing 
revisions in my repository? Or can it only make new revisions 
grow on my side?

If you allow your ref to get updated to an arbitrary value, you are lost,
unless you have signed tags that anchor things in place, in which case you
can trust the part of history that is reachable from them.