24 points chmaynard 1 hour ago 5 comments

WCSTombs 55 minutes ago | parent

`git add --resolved` is a wonderful idea, and definitely something I would start using.

KolmogorovComp 42 minutes ago | parent

Does it mean that when switching trop sha1 to sha256 you need to forcepush and rewrite all history? Wouldn’t that be a massive source of potential vulnerabilities?

nomel 40 minutes ago | parent

I don't know much about this. How does that enable vulnerabilities exactly?

jayd16 37 minutes ago | parent

Trusting a forced push w/o any other verification means nefarious history changes can be slipped in.