On Tue, Sep 16, 2014 at 5:41 AM, Duy Nguyen <pclo...@gmail.com> wrote: >> Even if you wanted to burn the money to find that magical collision that >> actually contains working code, you've still got to somehow propagate that >> to other repositories, since they'll just ignore it for having the same hash >> as an already-existing object. > > In the fetch/pull case, if you receive the "same" object that you > already have, git performs byte-to-byte comparison and warns loudly if > the "new"object does not match yours.
Correction, in the push case as well. You have to find another way to inject this collided object (perhaps via a server that is not C Git). -- Duy