pedrox

Nice. I was told Abstra is solid. Will give a try, thanks.

Of great value, if we were in the 70s.

Does it work on Chrome (nightly or with that support enabled)? Does anybody disagree that this is a no brainer for Mozilla: they should work that around ASAP (with a HTTP/2 blacklist for example). The impact is so high and it affects too many users. Also note that Google in its deepest feelings wants FF down so this may by even intentional since people will always blame the client.

Also, this hash function is linear so it has the equivalent substrings property. One can take advantage of it and be able to generate preimages even faster. Take a preimage and find m equivalent strings for n substrings of it. Replacing the substring with their equivalent will get you n to the m-th preimages that hash to the same value.

This hash is very weak. You can actually find many preimages of a given hash value in seconds with a meet-in-the-middle attack: https://gist.github.com/pedrox/eb8d674bf2b8be63da0f

I'm having similar problem on firefox 19 on ubuntu 12.10 x86-64. After some seconds it says "Hmm, that email address doesn't look right...".