4 ms·

I seem to remember Zach posting a Hacker News exploit to his blog a long time ago. Seems a little harsh for it still to be blocked I suppose, but I would guess

I seem to remember Zach posting a Hacker News exploit to his blog a long time ago. Seems a little harsh for it still to be blocked I suppose, but I would guess that's why. EDIT: This is the post I'm thinking of: http://xach.livejournal.com/214252.html http://xach.livejournal.com/214252.html

tptacek 16y ago
Ouch. I'm a little drunk and wiriting with the iPhone keyboard on a cta blue line train, but Xach's suggested fix (sha1(k, msg)) has a horrible vulnerability in it.