SHA-1 and Mercurial security: why you shouldn't panic yet | Hacker News Reader