alt Hacker NewsSince SHA-1 is already broken (just expensive in terms of GPU-time), then the text "please see commit <sha1>" is also already broken.
Replies
schacon • yesterday at 6:32 PM
That is essentially only a second preimage problem, which is basically impossible.
➕ show 1 reply
You can't attack an existing normal commit.
But also collisions there aren't a big deal. People will cite short hashes when referring to things and that's not "broken".