News for hackers. Stuff that matters.

A comment on How I created two images with the same MD5 hash.

Re:How I created two images with the same MD5 hash by crystaln on Tuesday November 04, 2014 @03:07AM (#8555543)
I'm curious what sort of vulnerabilities this could expose.

Conflicting git check ins, breaking cache layers, tampering with downloads, etc

[ Parent | on HN ]
Re:How I created two images with the same MD5 hash by dnet on Tuesday November 04, 2014 @03:25AM (#8555578)
1. git uses SHA-1, not MD5; former has problems, but is still better than latter

2. git stores the length of a blob before hashing [1] which makes it harder (but not impossible) to perform such attacks [2]

[1] http://www.git-scm.com/book/en/v2/Git-Internals-Git-Objects#... [2] http://blogs.msdn.com/b/oldnewthing/archive/2004/05/19/13493...

[ Parent | on HN ]