if you have buffer overflows today, you have buffers overflow.

git doesn't change that.

everyone is already using sha256 everywhere. i am. sha1 is only still around because github forces it for pretty urls