News for hackers. Stuff that matters.
Re:SHA-1 collider: Make your own colliding PDFs by ythn on Friday February 24, 2017 @04:12PM (#13727941)
I wanted to try this tool, but the upload requirements were so stringent (must be jpeg, must be same aspect ratio, must be less than 64KB) that I gave up. Would be nice if sample jpegs were provided on the page.
Re:SHA-1 collider: Make your own colliding PDFs by darkkindness on Friday February 24, 2017 @04:27PM (#13728067)
Here's what I got: http://i.imgur.com/d0lzPv9.jpg http://i.imgur.com/NBIKKRX.jpg

The tool gives me two pdfs that both hash to b8d36cccd01e5a4569ba01f9d15b54efedcd5d9f. It works... scary!

Re:SHA-1 collider: Make your own colliding PDFs by lochlainn on Friday February 24, 2017 @04:30PM (#13728103)
If you want to do a simple test, you can just generate some images with ImageMagick:

  $ convert -size 512x512 canvas:red canvas_red.jpg
  $ convert -size 512x512 canvas:blue canvas_blue.jpg
Re:SHA-1 collider: Make your own colliding PDFs by lsh on Friday February 24, 2017 @04:19PM (#13728002)
... are you joking?
Re:SHA-1 collider: Make your own colliding PDFs by lucb1e on Friday February 24, 2017 @04:26PM (#13728058)
(not OP) I understand why the requirements are strict so I can see why s/he was being downvoted, but I do agree that samples would be nice. Like, do I have to go search for some images with these requirements just to see if it really works (since it was supposed to take $100k)? By now someone mentioned it works in the comments though, so I guess I'll trust them.
Re:SHA-1 collider: Make your own colliding PDFs by shaymcrasherson on Friday February 24, 2017 @04:53PM (#13728272)
Is it really that hard to take a screenshot of a couple windows on your desktop and run:

$ convert screenshot.png -resize '500x500!' bar.jpg

or

$ sips -s format jpeg -Z 500x500 screenshot.png --out bar.jpg

Generating some workable source images is trivial. You're not interested in making a 'perfect hack pdf' for some nefarious purpose, just seeing if the service does what it says it does.

Re:SHA-1 collider: Make your own colliding PDFs by ythn on Friday February 24, 2017 @05:53PM (#13728695)
> Generating some workable source images is trivial

Everything is trivial if you know how to do it off the top of your head. Generating white noise samples is trivial. UV-mapping a texture to a mesh is trivial. Soldering resisters to a PCB is trivial. Generating an ARM toolchain with Yocto Project is trivial.

Is it a crime that I didn't feel like researching a bunch of CLI tools I've never heard of to try to use an app I was only mildly curious about?

Re:SHA-1 collider: Make your own colliding PDFs by TazeTSchnitzel on Friday February 24, 2017 @09:08PM (#13729561)
This overstates the difficulty of creating a JPEG. If you have an image editor on hand that isn't MS Paint (or you're using macOS, which has Preview), you merely need to export a JPEG and choose a low quality setting.

For a Windows user with no decent image editor or viewer installed, though, it could certainly be a hassle.

Re:SHA-1 collider: Make your own colliding PDFs by ythn on Saturday February 25, 2017 @12:11PM (#13732490)
None of the things I listed are difficult. They just require the right tool and know how. For someone like me with Xubuntu, I had neither the tools nor know how for creating small jpegs. I didn't fell like wasting 30 minutes researching and I didn't feel like walking over to a different computer that has MSPaint.
Re:SHA-1 collider: Make your own colliding PDFs by kinkrtyavimoodh on Friday February 24, 2017 @04:51PM (#13728255)
Most people wouldn't have such small JPGs lying around on their computer, and even less likely that they have 2 of them with the same aspect ratio. So, it's likely that they'll have to go and create them, which is quite a hassle. I know because I went to the site and then after mucking around in some of my directories, gave up.
Re:SHA-1 collider: Make your own colliding PDFs by Buge on Friday February 24, 2017 @10:58PM (#13729972)
You don't need to have such JPGs. You just crop/resize them in Gimp or Paint.
Re:SHA-1 collider: Make your own colliding PDFs by StavrosK on Friday February 24, 2017 @07:54PM (#13729347)
Well, a sample pair of PDFs would be nice, so we didn't have to go looking for or creating the JPGs...
Re:SHA-1 collider: Make your own colliding PDFs by b1gtuna on Friday February 24, 2017 @05:30PM (#13728540)
Ya it was annoying - here is my output tho: https://drive.google.com/drive/folders/0BzPYSqARS6D6SUZUYS1p...
Re:SHA-1 collider: Make your own colliding PDFs by prophesi on Friday February 24, 2017 @05:23PM (#13728493)
I just did an arbitrary google image search specifying the image size to be 512x512, and they worked fine.