News for hackers. Stuff that matters.
Re:Linus on Git and SHA-1 by wongarsu on Saturday February 25, 2017 @07:27PM (#13734818)
Executables in git are bad practise, but not all that uncommon. Images in git are the norm, and if somebody comes in and creates a pull request with an improved version of the existing images (better compression, better adapted for color blind people, fixing whitespace issues etc.) that's pretty unsuspicious and likely to succeed (and I've seen it multiple times).
Re:Linus on Git and SHA-1 by usrusr on Sunday February 26, 2017 @04:37AM (#13736460)
But how would a safer hash improve resistance to that blob update scenario? How would a weaker hash make it more dangerous? If you have a fiercely audited branch next to one that is basically free for all, maybe?