Comment by kbwt

Anecdotally I know of one very popular application that has a bug in their SHA-1 implementation causing it to effectively only perform a single round.