payload: {"action":"created","issue":{"url":"https://api.github.com/repos/apache/netbeans/issues/1260","repository_url":"https://api.github.com/repos/apache/netbeans","labels_url":"https://api.github.com/repos/apache/netbeans/issues/1260/labels{/name}","comments_url":"https://api.github.com/repos/apache/netbeans/issues/1260/comments","events_url":"https://api.github.com/repos/apache/netbeans/issues/1260/events","html_url":"https://github.com/apache/netbeans/pull/1260","id":447286410,"node_id":"MDExOlB1bGxSZXF1ZXN0MjgxMzE0MDcx","number":1260,"title":"Adds SHA-512 to external binaries","user":{"login":"emilianbold","id":991554,"node_id":"MDQ6VXNlcjk5MTU1NA==","avatar_url":"https://avatars0.githubusercontent.com/u/991554?v=4","gravatar_id":"","url":"https://api.github.com/users/emilianbold","html_url":"https://github.com/emilianbold","followers_url":"https://api.github.com/users/emilianbold/followers","following_url":"https://api.github.com/users/emilianbold/following{/other_user}","gists_url":"https://api.github.com/users/emilianbold/gists{/gist_id}","starred_url":"https://api.github.com/users/emilianbold/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/emilianbold/subscriptions","organizations_url":"https://api.github.com/users/emilianbold/orgs","repos_url":"https://api.github.com/users/emilianbold/repos","events_url":"https://api.github.com/users/emilianbold/events{/privacy}","received_events_url":"https://api.github.com/users/emilianbold/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":13,"created_at":"2019-05-22T18:41:21Z","updated_at":"2019-09-16T16:07:14Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/apache/netbeans/pulls/1260","html_url":"https://github.com/apache/netbeans/pull/1260","diff_url":"https://github.com/apache/netbeans/pull/1260.diff","patch_url":"https://github.com/apache/netbeans/pull/1260.patch"},"body":"The download task now supports lines with the format\r\n\r\nSHA-512 artifact-name hash-value\r\n\r\nfollowing the original SHA1 hash line.\r\n\r\nRight now the file name still needs the SHA1 value, so we keep it. In the future we could modify the task to fail the build if the SHA-512 is missing."},"comment":{"url":"https://api.github.com/repos/apache/netbeans/issues/comments/531845527","html_url":"https://github.com/apache/netbeans/pull/1260#issuecomment-531845527","issue_url":"https://api.github.com/repos/apache/netbeans/issues/1260","id":531845527,"node_id":"MDEyOklzc3VlQ29tbWVudDUzMTg0NTUyNw==","user":{"login":"emilianbold","id":991554,"node_id":"MDQ6VXNlcjk5MTU1NA==","avatar_url":"https://avatars0.githubusercontent.com/u/991554?v=4","gravatar_id":"","url":"https://api.github.com/users/emilianbold","html_url":"https://github.com/emilianbold","followers_url":"https://api.github.com/users/emilianbold/followers","following_url":"https://api.github.com/users/emilianbold/following{/other_user}","gists_url":"https://api.github.com/users/emilianbold/gists{/gist_id}","starred_url":"https://api.github.com/users/emilianbold/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/emilianbold/subscriptions","organizations_url":"https://api.github.com/users/emilianbold/orgs","repos_url":"https://api.github.com/users/emilianbold/repos","events_url":"https://api.github.com/users/emilianbold/events{/privacy}","received_events_url":"https://api.github.com/users/emilianbold/received_events","type":"User","site_admin":false},"created_at":"2019-09-16T16:07:14Z","updated_at":"2019-09-16T16:07:14Z","author_association":"CONTRIBUTOR","body":"Would be an interesting proof of concept to build a JAR with a colliding\nSHA1 using the https://shattered.io paper and show that if one were to\ncontrol the network / proxy one could basically inject executable code into\na fresh NetBeans build.\n\nOf course, it cost Google $100,000 beginning of year to find a collision\nbut perhaps in a few years it could become cheap enough to run on a GTX.\n\n--emi\n\n\nOn Mon, Sep 16, 2019 at 5:30 PM Neil C Smith <notifications@github.com>\nwrote:\n\n> As this hasn't been updated for NB 11.2 and is likely to drift further\n> away from being mergeable I suggest we close this PR, and open another one\n> as and when it's ready to be merged?\n>\n> —\n> You are receiving this because you were mentioned.\n> Reply to this email directly, view it on GitHub\n> <https://github.com/apache/netbeans/pull/1260?email_source=notifications&email_token=AAHSCQRJW2YCRKWBWWP7KYDQJ6KA5A5CNFSM4HOW6YQ2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD6ZK3RA#issuecomment-531803588>,\n> or mute the thread\n> <https://github.com/notifications/unsubscribe-auth/AAHSCQW5QCLNXUGN2ZLM2J3QJ6KA5ANCNFSM4HOW6YQQ>\n> .\n>\n"}}
other: {"actor":{"display_login":"emilianbold"}}