{"type":"rich","version":"1.0","author_name":"npub1jl9phmfrflkqfm34r2mn9yszrwgpmdq8nh4s0y00xr7yy83ug48sumzsyg","author_url":"https://nostr.ae/npub1jl9phmfrflkqfm34r2mn9yszrwgpmdq8nh4s0y00xr7yy83ug48sumzsyg","provider_name":"njump","provider_url":"https://nostr.ae","html":"📅 Original date posted:2013-04-01\n📝 Original message:An attacker would have to find a collision between two specific pieces of\ncode - his malicious code and a useful innoculous code that would be\naccepted as pull request. This is the second, much harder case in the\nbirthday problem. When people talk about SHA-1 being broken they actually\nmean the first case in the birthday problem - find any two arbitrary values\nthat hash to the same value. So, no I don't think it's a feasible attack\nvector any time soon.\n\nBesides, with that kind of hashing power, it might be more feasible to\ncause problems in the chain by e.g. constantly splitting it.\n\n\nOn 1 April 2013 03:26, Melvin Carvalho \u003cmelvincarvalho at gmail.com\u003e wrote:\n\n\u003e I was just looking at:\n\u003e\n\u003e https://bitcointalk.org/index.php?topic=4571.0\n\u003e\n\u003e I'm just curious if there is a possible attack vector here based on the\n\u003e fact that git uses the relatively week SHA1\n\u003e\n\u003e Could a seemingly innocuous pull request generate another file with a\n\u003e backdoor/nonce combination that slips under the radar?\n\u003e\n\u003e Apologies if this has come up before ...\n\u003e\n\u003e\n\u003e ------------------------------------------------------------------------------\n\u003e Own the Future-Intel\u0026reg; Level Up Game Demo Contest 2013\n\u003e Rise to greatness in Intel's independent game demo contest.\n\u003e Compete for recognition, cash, and the chance to get your game\n\u003e on Steam. $5K grand prize plus 10 genre and skill prizes.\n\u003e Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d\n\u003e _______________________________________________\n\u003e Bitcoin-development mailing list\n\u003e Bitcoin-development at lists.sourceforge.net\n\u003e https://lists.sourceforge.net/lists/listinfo/bitcoin-development\n\u003e\n\u003e\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20130401/8f2483a3/attachment.html\u003e"}