Git is DEAD

DEAD
https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html

>>1
but IIRC git doesn't use SHA1 for security, it's still resistant to accidental collisions

>>3
that's old news, MD5 hasn't been considered secure since someone collided M$ certs to issue malicious windows updates

>>3,4
MD5 collisions could be found in seconds on hardware 10 years ago:

https://www.win.tue.nl/hashclash/
http://lookit.typepad.com/lookit/2006/03/creating_collis.html

>>8
It's not really a problem until someone comes up with two colliding source files (i.e. ASCII text.)

Nevertheless, FUCK GOOGLE. I was hoping the Chinese would come up with it first, using actual brain power instead of CPU time like they did with MD5, but these fat pigs beat them to it.