Show newer

@mewmew @Yann @a1batross @mittorn
So, he made mastodon intentionally bad, so there would be only few 'objectively better' servers by making it so only few hacked servers remain 'objectively better' anyway...

WHAT??? :coomer: :gun_emoji:

@wilkie
Damn, I will have to look fucking deep into this now... Thanks.

(My first theory is, that x is static, but it might be the way int is written in memory... In short, FUCK YOU, I HAVE TO DO A PROPER RESEARCH NOW!!!)

here's a party trick I'm excited to show students: negating the smallest number might not work on computers, which kinda makes you want to switch careers.

@niconiconi Wait a minute... That is only 8 times faster. That should be far from enough to make a difference.

Am I missing something?

We have computed the very first chosen-prefix collision for SHA-1. To put it in another way: all attacks that are practical on MD5 are now also practical on SHA-1.

We have reduced the cost of a collision attack from 2^64.7 to 2^61.2, and the cost of a chosen-prefix collision attack from 2^67.1 to 2^63.4.

Demo: The legacy branch of GnuPG (version 1.4) is vulnerable. We have created two PGP keys with different UserIDs and colliding certificates.

sha-mbles.github.io/

Show older
Game Liberty Mastodon

Mainly gaming/nerd instance for people who value free speech. Everyone is welcome.