| |||||||||||||
kernel.org compromisedkernel.org compromisedPosted Sep 1, 2011 7:21 UTC (Thu) by raalkml (guest, #72852)In reply to: kernel.org compromised by daney Parent article: kernel.org compromised
Not just this axiom. It takes much more than a hash collision to introduce a commit into a git repository or change the recorded history.
See http://git-blame.blogspot.com/2011/08/how-to-inject-malic... for details
(Log in to post comments)
kernel.org compromised Posted Sep 2, 2011 5:52 UTC (Fri) by joey (subscriber, #328) [Link]
Junio's blog post, strangely, does not mention sha1 collisions at all. sha1 collisions would allow bypassing exactly the mechanisms he describes.
|
|||||||||||||