Cryptography] SHA1 collisions make Git vulnerable to attakcs by third-parties, not just repo maintainers After sitting through an endless flood of headless-chicken messages on multiple media about SHA-1 being fatally broken, I thought I'd do a quick writeup about what this actually means.