[zephyr9]

> many tools and developers rely on or automatically assume that commit hashes are collision resistant.

Solution seems to be don't. Use the tool as the tool was intended.

[roenxi]

That is a good plan on first consideration, but on close inspection appears to require that the tool author was omniscient and anticipated every possible use of their tool.

Traditionally a lot of the usefulness from tools comes from people doing things that were not intended. The modern web springs to mind, it was a terrible hack in the grand old IE days.

It is better for tools to have obvious failure modes.

[Dylan16807]

> Use the tool as the tool was intended.

Make tools better and safer when there are good opportunities.

[still_grokking]

This assumes that people actually know what they're doing when writing code.

But this assumption was proven wrong infinite many times already.

Shouting RTFM didn't help, even after decades of doing so.

Actually it's getting worse.

Copy'n'paste form Stackoverflow without understanding anything was likely only a warmup. Now we're going to get AI generated code.