On: SHA1 collisions make Git vulnerable to attacks

[grandalf]

As long as the first part of the diff shown appeared not to be abnormal, some users might be fooled.

For example, a file could be created that appears to be a normal source file at the front but contains some other behavior further down.