If you manage to get a vulnerability into a widely used codebase using a sha1 co... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		adrianN on Feb 27, 2017 \| parent \| context \| favorite \| on: SHA1 collisions make Git vulnerable to attacks If you manage to get a vulnerability into a widely used codebase using a sha1 collision, that could very well be worth more than $100k.

StreamBright on Feb 27, 2017 [–]

They managed it without any collision several times:

https://arstechnica.com/security/2016/08/cisco-confirms-nsa-...

https://www.theregister.co.uk/2010/12/15/openbsd_backdoor_cl...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact