Oh, I think secrecy would be against the spirit of the experiment. And yeah, I wonder what kind of mods they would need to make to their tools in response. If i

Oh, I think secrecy would be against the spirit of the experiment. And yeah, I wonder what kind of mods they would need to make to their tools in response. If it takes 10 years to generate the collisions, then it seems like it might be a worthwhile approach (in the thought experiment universe only). But we should also recognize that the article demonstrates collision attacks, not preimage attacks, which would be the attack you want to worry about if you are using a trusted hash to verify a file you received over an untrusted channel.