fuck SHA-1, thx @locolupo