Like most security vulnerabilities these days, this attack works only on Linux.
You see 3 hash right. So one would be for my file_1.txt, the other would be for the snapshot created when I commited. What is the third one ? Well because a commit is an object in itself, it is also compressed and stored in the object folder.
Wow, after deciphering this kindergarten stream of thought I came to the conclusion that the author's intellect, which I tower above, was vanishingly small just like the collective intellect of "hacker news" itself.