3 ms·
Yes, because warez is the only valid use of bittorrent. Most Linux distros offer an installation iso via torrent, large files with many blocks. If you can chan
by vermilingua 6y ago
Yes, because warez is the only valid use of bittorrent.
Most Linux distros offer an installation iso via torrent, large files with many blocks. If you can change just a small part of those files, you’ve got compromised machines before the install even begins.
- mlyle 6y agoMost of the practical hash attacks we've seen allow one to create two chunks of data that hash to the same thing, not to collide with an arbitrary other block. This greatly limits the attack scenarios we need to worry about. (That is, we've got practical collision attacks emerging for SHA1, not pre-image attacks).
- userbinator 6y agoYou would need to create a colliding pair (because the single existing one is so well known), itself not a simple thing, and create the two executables specifically with additional code discriminating between the two pairs to do two different things. You can't replace existing files with this attack, which means you'd have to create your own Linux distro with this extra "feature" and can't attack existing ones.