Re:Linus' reply on Git and SHA-1 collision
by falsedan on Friday February 24, 2017 @03:24AM
(#13722006)
Technically, he was emphasizing how low the probability was, not the risk. Since the impact is pretty high in both cases (accepting a malicious object/mid-air collision), the risk (as a combination of probability & impact) is significant.
[ Parent
| on HN ]
Re:Linus' reply on Git and SHA-1 collision
by falsedan on Friday February 24, 2017 @09:13AM
(#13723783)
Hi downvoters, without some post setting me straight I will be wrong forever, where can I learn more about risk analysis and mitigation?
Re:Linus' reply on Git and SHA-1 collision
by braveo on Friday February 24, 2017 @09:31AM
(#13723910)
I think you're getting downvoted because while you may not necessarily be wrong, you're also not really disagreeing with what I said, just making a distinction that isn't all that important (in the context of this conversation).