Joanna Rutkowska @rootkovska
Is git susceptible to the SHA1 collision attacks also by 3rd-parties (in addition to maintainers, which it surely i… https://t.co/yuiCCzEtIg — PolitiTweet.org
Peter Todd @peterktodd
@rootkovska Tree objects may be the more concerning thing, because likely possible to hide extra data at the end of a tree obj from review.