@arthurlutz @marmoute AFAICT neither Mercurial nor Git are (more) affected (than before) by #shambles. Because it is still not a second pre-image attack. Aside from the fact that every additional attack like this makes cracking SHA1 more efficient, adding nails to its coffin, that is.

Sign in to participate in the conversation
Logilab's Mastodon

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!