3 ms·

> random odd generated crud in the middle of your source code, you will absolutely notice like non-printing characters in comments? Or, you know, random odd g

• ProblemFactory 10y ago
  If you were planning on getting a compromised binary blob into a git repository, you would not bother with the whole SHA-1 collision and switching things out later. You would just build a hidden backdoor into the first binary blob, like a deliberately omitted array bounds check if specific parameters are used. Reviewers and tests won't find that in complied binary code either, it's much easier to hide than large amounts of garbage data, and you even get to keep plausible deniability of it being a honest mistake if discovered.
  • posterboy 10y ago
    also to divert my criticism, that directory is not for new commits