SHA-1's slow death: Git devs spent 12 years arguing, and the ecosystem still hasn't finished SHA-256
geoffreyirving · x · 2026-10-23
Researcher Geoffrey Irving posted a wry timeline of crypto migration inertia: SHA-1 published in 1995, first theoretical collision attack in 2005, then 12 years (2005-2017) of Git developers arguing the situation was fine, followed by 2017-2026 of the ecosystem — largely GitHub — failing to finish the SHA-256 rollout.
More from Fun
- Interactive 3D AI server explainer built in one prompt with Claude and the open-source colorfigures skill — Promptmethus · 2026-10-23
- Microduck: why this cute robot toy matters more than it looks — TinfoilTricorn · 2026-10-23
- Watching AI test your app like a real, picky customer — randal_olson · 2026-10-23
- Researcher accidentally gets a blue checkmark after subscribing to Grok's bot service — ChrisRackauckas · 2026-10-23
- GitHub suffers 'unplanned uptime' as all-green status page becomes a meme — max_paperclips · 2026-10-23
- AGIBOT's A3 Ultra humanoid robot demonstrates roller-skating mobility — TinfoilTricorn · 2026-10-23