Good point, only need to brute the commit being modified to have it match the original hash.
To get a brief sense of how hard it is to do, one can look at a sample project like gitbrute [0] that tries to brute force the first n letters of a commit hash. It took someone 30 mins to brute first 8 hex letters (of 40) on a MBP [1] with that.
Comments
Good point, only need to brute the commit being modified to have it match the original hash.
To get a brief sense of how hard it is to do, one can look at a sample project like gitbrute [0] that tries to brute force the first n letters of a commit hash. It took someone 30 mins to brute first 8 hex letters (of 40) on a MBP [1] with that.
[0] https://github.com/bradfitz/gitbrute
[1] https://github.com/bradfitz/deadbeef/commit/deadbeefa1a98280...