Previous brute forcing efforts [1] have fiddled with commit and author timestamps.
If you had seven commits, and two timestamps per commit, and each timestamp could be fudged by 90 minutes without detection, you might not need any dummy comments or files at all.
