Re:Git 3.0's upcoming SHA-256 default will be a costly mistake
by xeyownt on Friday October 02, 2026 @07:09AM
(#49932165)
Ok, so the guy manages GitHub and doesn't want to pay the price.
Fair enough.
But the worrying part is that he seems really convinced that his security analysis of the vulnerability is complete, and that we should be convinced as well.
If you didn't need a strong hash, use a very fast one then, like MurMurHash.
Fair enough.
But the worrying part is that he seems really convinced that his security analysis of the vulnerability is complete, and that we should be convinced as well.
If you didn't need a strong hash, use a very fast one then, like MurMurHash.