Cache deduplication and the SHA1 collision attack

Duplicate https://news.ycombinator.com/item?id=13725093 . (Yes, this one was first, but the other picked up votes and comments.)