News for hackers. Stuff that matters.
Re:Git 3.0's upcoming SHA-256 default will be a costly mistake by fpaq on Friday October 02, 2026 @01:55PM (#49936501)
> However, if I see that you pushed commit abcd134, and then I can build and push a colliding commit...

You cannot do that. This is called a second-preimage attack, which has not been demonstrated even against MD5, let alone SHA1.

There are no comments on this comment yet.