I thought I'd write an update on git and SHA1, since the SHA1 collision attack was so prominently in the news. Quick overview first, with more in-depth explanation below: (1) First off - the sky isn't falling.