[via: Schneier on Security (update)]
"Collisions found in the the full SHA-1 in 2**69 hash operations, much less than the brute-force attack of 2**80 operations based on the hash length."
NSA published SHA-1 in 1995. This means that the gap between them and ROW (Rest Of World) has shrunk down to 10 years, at least when it comes to hash functions. It used to be at least 25 years when DES was published.