Re: About git and the use of SHA-1

From: Geoffrey Irving <irving@naml.us>
Date: Apr 29, 2008, 21:39 UTC
Message-ID: <7f9d599f0804291439m6f5dd242jb31b84e1a0205cdc@mail.gmail.com>
In-Reply-To: <20080429205031.GA14547@frsk.net>

On Tue, Apr 29, 2008 at 1:50 PM, Fredrik Skolmli <fredrik@frsk.net> wrote:

Show 18 quoted lines

> On Tue, Apr 29, 2008 at 01:31:51PM -0700, Geoffrey Irving wrote:
>
>  > I sincerely hope that pdf/postscript don't allow the internal
>  > rendering code to branch based on the current date.  That would be an
>  > absurd security hole, and would indeed make you entirely correct.  If
>  > you actually know that it is possible to write that in postscript, I
>  > would very much want to see an example.
>
>  Have a look at
>
>  * http://th.informatik.uni-mannheim.de/People/Lucks/HashCollisions/letter_of_rec.ps
>  vs
>  * http://th.informatik.uni-mannheim.de/People/Lucks/HashCollisions/order.ps
>
>  both found on a website[1] already mentioned[2] in this thread. :-)
>
>  [1]: http://th.informatik.uni-mannheim.de/People/Lucks/HashCollisions/
>  [2]: http://marc.info/?l=git&m=120949349923584&w=2

This is an example of a hash collision, not conditional rendering based on the current date. I.e., you didn't actually read my email or the email I was replying to. :)

Geoffrey