3 ms·
that depends on the attacker objective, if you just want to trash the file you can just search for any piece that have a hash collision, but if you want to turn
by chaosfox 10y ago
that depends on the attacker objective, if you just want to trash the file you can just search for any piece that have a hash collision, but if you want to turn the file into a malware you will need to modify the file in a specific way, possibly spanning multiple pieces, and there's less room for fuzzing the hash.
- heinrich5991 10y agoPeople do exploits by changing 1 bit! I'm sure you can distribute malware using just one chunk, given some cleverness.
- rocqua 10y agoAs mentioned else were in this thread, you can put a lot of the payload outside the single collision piece. People are unlikely to go looking for executable code inside a video. All you need for the colliding pieces is for one to trigger the payload and the other not to trigger the payload.