News for hackers. Stuff that matters.
Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by orisho on Saturday April 27, 2019 @06:08AM (#19764796)
I think his point is that for some checksums it could be trivial (and for some, tools already exist). Checksums aren't designed for this, while on the other hand secure hashing is. As a result, authors of hashing algorithms often attempt to mathematically prove their strength and resistance to a collision.
Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by jhasse on Saturday April 27, 2019 @06:11AM (#19764807)
Docker uses SHA256 though, for which it isn't trivial.
Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by orisho on Saturday April 27, 2019 @03:49PM (#19767296)
Yes. The previous comments were about checksums, which SHA256 is not.