Gentoo Archives: gentoo-dev

From: Tim Boudreau <niftiness@×××××.com>
To: Gentoo Developers <gentoo-dev@l.g.o>
Subject: Re: [gentoo-dev] git security (SHA-1)
Date: Wed, 17 Sep 2014 11:21:16
Message-Id: CA+qecRPDHd4-viS=eYtROgfe7hszxZO5Msb0b8mBiGge4orF1A@mail.gmail.com
In Reply to: Re: [gentoo-dev] git security (SHA-1) by Ciaran McCreesh
1 If someone wants to commit malicious code into Gentoo, they're far more
2 likely to take the ugly but pragmatic approach of, say, forcing someone to
3 commit malicious code at gunpoint and then shooting them, than to go to the
4 vast effort it would take to come up with malicious code that conveniently
5 has the same SHA-1 hash as an existing commit.
6
7 -Tim

Replies

Subject Author
Re: [gentoo-dev] git security (SHA-1) Ciaran McCreesh <ciaran.mccreesh@××××××××××.com>
Re: [gentoo-dev] git security (SHA-1) Piotr Szymaniak <szarpaj@××××××××.pl>