Good point, only need to brute the commit being modified to have it match the original hash. To get a brief sense of how hard it is to do, one can look at a sa

Good point, only need to brute the commit being modified to have it match the original hash. To get a brief sense of how hard it is to do, one can look at a sample project like gitbrute [0] that tries to brute force the first n letters of a commit hash. It took someone 30 mins to brute first 8 hex letters (of 40) on a MBP [1] with that. [0] https://github.com/bradfitz/gitbrute https://github.com/bradfitz/gitbrute [1] https://github.com/bradfitz/deadbeef/commit/deadbeefa1a98280231197b184c6d7ea4d2a7055#commitcomment-8209712 https://github.com/bradfitz/deadbeef/commit/deadbeefa1a98280...