Targeted sha-1 collisions now apparently much more possible and cheaper with new research zdnet.com/article/sha-1-collis

How long till someone introduces an intentional cycle in a git repository? Anyone want to place bets on which one? My guess: the linux kernel, sometime in the next 1.5 years.

HT @rixx for the link

@cwebber @rixx

If I was a conspiracy-minded woman..I would say the NSA would do it.

@squeakycheetah @rixx If I was a conspiracy-minded person, I would say the NSA already has :)

Follow

@cwebber @rixx Yet they managed to get it past review..I would say that they have very bad vision. Worse than mine, and I wear glasses!

Sign in to participate in the conversation
Awoo Space

Awoo.space is a Mastodon instance where members can rely on a team of moderators to help resolve conflict, and limits federation with other instances using a specific access list to minimize abuse.

While mature content is allowed here, we strongly believe in being able to choose to engage with content on your own terms, so please make sure to put mature and potentially sensitive content behind the CW feature with enough description that people know what it's about.

Before signing up, please read our community guidelines. While it's a very broad swath of topics it covers, please do your best! We believe that as long as you're putting forth genuine effort to limit harm you might cause – even if you haven't read the document – you'll be okay!