> I don't know why you're operating from the presumption that most security people know anything at all about basic cryptography I don't know why you're operat

> I don't know why you're operating from the presumption that most security people know anything at all about basic cryptography I don't know why you're operating from the presumption I'm talking about security people in general. I'm talking about the people at Kaspersky who were tasked with writing a SSL certificate store. I will also quote the bug report: "You don't have to be a cryptographer to understand a 32bit key is not enough to prevent brute-forcing a collision in seconds. In fact, producing a collision with any other certificate is trivial." > Have you taken a second to even think about how this precise bug even makes sense as an implant? Hint: it does not make sense as an implant. Hint: Pair this with a DNS spoof and you can pretend to be whatever website you want.