News for hackers. Stuff that matters.
Re:Git's initial commit by VieElm on Sunday November 23, 2014 @08:45PM (#8650668)
I was under the impression that git hashes are generated based on the contents in a commit. If that's true you cannot retire them. They're not random.
Re:Git's initial commit by Iburinoc on Monday November 24, 2014 @12:07AM (#8651131)
While that is true, part of the contents that is hashed is the time of commit. Therefore if you (somehow...) managed to get that hash, you could just reset and commit again. Or amend.

In any case, I believe he was joking. The odds of a sha1 collision are very very low.

Re:Git's initial commit by sytelus on Monday November 24, 2014 @04:06AM (#8651560)
Very low indeed. Chance of SHA1 collision is of the order of 2^52. One person explained it this way: Chance of everyone currently on Earth winning a jackpot in their lifetime is actually higher than a single random SHA1 collision. It should be actually mind boggling how many of the software systems and algorithms rely on hashes and them being not collided.
Re:Git's initial commit by yuhong on Saturday November 29, 2014 @07:33PM (#8675551)
I think it is 2^61 now, the paper that once showed the 2^52 attack has removed the claims.