So many people are getting the SHA1 story wrong. With the collision that Google released, *anyone* can create colliding PDFs for *free*.
-
@thegrugq yes, but it has to be the same anything to both files. Which makes it more useful for vandalism than for fraud.
You could have one document digitally signed, then swap it with another one.
-
-
but what would the differences be? Would they be *useful*?
-
You can make the two documents look completely different. See https://alf.nu/SHA1 and my other tweets.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.