@arthurlutz @marmoute AFAICT neither Mercurial nor Git are (more) affected (than before) by #shambles. Because it is still not a second pre-image attack. Aside from the fact that every additional attack like this makes cracking SHA1 more efficient, adding nails to its coffin, that is.

Sign in to participate in the conversation
Logilab's Mastodon

This Mastodon instance is dedicated to Logilab's users and friends.