Make your own colliding PDFs: https://alf.nu/SHA1
-
The published collision cannot be used to attack Git because Git prefixes blobs with a header.
Someone could use the same approach and spend the $100k to compute a Git-targeted prefix collision though.
-
-
They have plans to fix it but IMO they're at >5 years too late. Seems short-term they'll use the mitigated SHA1?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Could they though? I forgot about the prefix - it actually contains the blob length in bytes.
-
Sure, it just means the length would have to be constant. Hardly a showstopper.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.