Re:Kim Dotcom's Extradition to the U.S. Given Green Light by...
by fluoridation on Thursday August 15, 2024 @11:57AM
(#41257480)
BitTorrent uses SHA-1, not MD5. It's not ideal, but hardly vulnerable.
Re:Kim Dotcom's Extradition to the U.S. Given Green Light by...
by kbolino on Thursday August 15, 2024 @12:26PM
(#41257772)
SHA-1 has been broken since 2017. It is considerably more expensive to produce a SHA-1 collision than an MD5 collision, but certainly not impossible. However, BitTorrent v2 also came out in 2017 and uses SHA-256, for which no known collisions exist even today.
If you are connected to a server, the server is the only connection(and only one with a log) but with a torrent, there are multiple connections so multiple parties could be keeping logs.
Depending on how a file is split in the torrent, it could be possible to add malice data with a collision: https://www.mscs.dal.ca/~selinger/md5collision/