3 ms·

I believe there is one more step. You have to somehow get the collision into the repository. Because if you have <hash> in your own repo and pull something from

I believe there is one more step. You have to somehow get the collision into the repository. Because if you have <hash> in your own repo and pull something from another repo with the same <hash>, the remote changes will not overwrite your blob for <hash> (it will stay the same). Or at least that’s what I seem to remember from something that Torvalds wrote.

hn_p4ttern 3y ago
> "I believe there is one more step. You have to somehow get the collision into the repository." Yes, Exactly. So, is it necessary to change SHA-1 having in git ? At the moment, I think there is no reason because SHA-1 doesn't expose security vulnerabilities or functional issues.