4 ms·

Interesting. What this shows to me is that md5 needs to die. Perhaps it was a good in times past, but now it is too easy to crack with commodity computer hardw

by korethr 13y ago

Interesting. What this shows to me is that md5 needs to die. Perhaps it was a good in times past, but now it is too easy to crack with commodity computer hardware. The rig shown in the article costs <$2000 USD when priced out on newegg.com. Top-shelf gaming GPUs are only going to get faster. I was surprised to read that the right to freedom of speech is not recognized in France. Anyone here from France willing to affirm or refute article's claim in that regard?

deleted 13y ago
[deleted]
ludwigz 13y ago
We have what we call "Liberté d'expression" http://fr.wikipedia.org/wiki/Libert%C3%A9_d'expression http://fr.wikipedia.org/wiki/Libert%C3%A9_d'expression but it's limitated by the law. For example you can't say racists things in public.
- camus2 13y ago
  Lol,there is no "Liberté d'expression" in France. Even if you say something the most gentle way you'll get sued because you said so. There is only "la liberté d'exprimer son accord avec la pensée unique". But things might change, for better or worst. France is living a very interesting time. Things can blow up anytime.
  - abolibibelot 13y ago
    I'm curious to see some references and figures here. As far as I know, only Hate Speech, and holocaust-denial are forbidden. Libel laws apply too, and some people are trigger-happy with them though.
    - patrickaljord 13y ago
      But accusations of Hate Speech are being broadly abused. For example, a guy I disagree with on almost every issues (economy and immigration) Eric Zemmour was accused and found guilty of hate speech for saying that most people in jail are Arabs in France. This is a fact that was confirmed by many judges and yet the guy was still sentenced cause he hurt some people's sensitivity (I guess...). I'm half Arab myself and still it's obvious to me that most people in jail in France are Arabs (mostly cause they're the poorer), but still, it's true.
      - abolibibelot 13y ago
        Yep, as much as I despise Zemmour, the lawsuits against him are inept. He's the ultimate troll and thrives on contreversy (and whines about "la pensée unique" while being invited pretty much everywhere on TV). Even the laws against holocaust denial are counter productive, since they make the deniers loonies look like martyrs.
  - ludwigz 13y ago
    This is obviously a troll...
orborde 13y ago
This could equally well have been done to an SHA1 implementation. MD5 is not especially susceptible to brute-force preimage attacks.
deleted 13y ago
[deleted]
maximegarcia 13y ago
The freedom of speech is a right guaranteed, but it comes with some (minor in fact) limitations : incitement to hatred, discrimination, slander and racial insults ; racist, anti-Semite, or xenophobic activities (so including the promotion via speech), Holocaust denial ; hatred against people because of their gender, sexual orientation, or disability are prohibited and can even be sentenced with jail time for some of those. http://en.wikipedia.org/wiki/Freedom_of_speech_by_country#France http://en.wikipedia.org/wiki/Freedom_of_speech_by_country#Fr...
byroot 13y ago
> I was surprised to read that the right to freedom of speech is not recognized in France. It is. The french constitution state: > La libre communication des pensées et des opinions est un des droits les plus précieux de l’homme ; tout citoyen peut donc parler, écrire, imprimer librement, sauf à répondre de l’abus de cette liberté dans les cas déterminés par la loi. Which mean that you have free speech, BUT, you can be prosecuted if you abuse it as defined by the law. Example of common abuses: defamation (the most common), incitement to ethnic or racial hatred, privacy violation, historical revisionism, intellectual property infringement, etc. But except "incitement to ethnic or racial hatred" and "historical revisionism" it's mostly the same in the US. Also, it's not all about the law, during the same sex marriage debates, a lot of homosexual people got beaten by far right / nazi-like groups.
- haiduc 13y ago
  > a lot of homosexual people got beaten by far right / nazi-like groups. This IS a lie. Do you have any sources? There have been one attack on a gay couple, hugely used by the government and their supporting medias. Newspapers have implies (no facts) that the culprits where members of the strike against same sex marriage or far right activists. There was then a huge huge buzz to shame the strikers. And finally, 4 months later, the police arrested 4 youths: 3 in a "cité" (public housing, "ghetto") and one was already in jail, all of them well known of the police services for violence facts. http://www.leparisien.fr/paris-75/agression-homophobe-a-paris-les-auteurs-presumes-arretes-20-09-2013-3153685.php http://www.leparisien.fr/paris-75/agression-homophobe-a-pari... Some people in the comments do say that the police delayed the arrest so that the government could shame the protesters against same sex marriage. One more thing, the man beaten reacts to the arrest on a far left web site. https://bellaciao.org/fr/spip.php?article137205 https://bellaciao.org/fr/spip.php?article137205 And he is in a complete deny, not being able to recognize that those who beat him have nothing in common with those that protested against same sex marriage.
  - byroot 13y ago
    > This IS a lie. Do you have any sources? What's the "lie", the aggressions or the fact that it come from far right groups ? If the former: http://www.france24.com/fr/20130421-climat-homophobie-agression-insecurite-mariage-pour-tous-extremisme http://www.france24.com/fr/20130421-climat-homophobie-agress... > 1200 aggressions on homosexual people in the first 3 months of 2013 compared to 1 556 on the whole 2011. Almost 4 times more than usual, is it enough for you ? About the authors of the aggressions: http://www.lemonde.fr/societe/article/2013/09/04/bar-gay-saccage-a-lille-un-an-de-prison-requis_3471318_3224.html http://www.lemonde.fr/societe/article/2013/09/04/bar-gay-sac... Are skinheads far-right enough for you ? But off course, skinheads are probably not behind ALL these aggressions, most of them are probably "standard" homophobics.
bigiain 13y ago
"What this shows to me is that md5 needs to die." No. MD5 needs to stop being used in inappropriate ways. Switching rsync to bcrypt, scrypt, or pbkdf2 for it's hashing is _not_ a sensible idea. Using "fast hashes" for cryptographic level protection is not a sensible idea. MD5 still has a great many uses. Killing it off because some people use it for the wrong things is shortsighted at best…
- olivier1664 13y ago
  Does there is a secure enough Hash function for Gravatar usage?
  - bigiain 13y ago
    That's kind-of a non-question. If you assume that "Gravatar usage" means uses a unique identifier for me across multiple websites, and that "secure enough" means that it doesn't leak information about my identity – then the question becomes nonsense: "Is there a way to uniquely identify me across multiple websites that doesn't uniquely identify me?"
lstamour 13y ago
Related to cracking with a GPU: https://passfault.appspot.com/password_strength.html https://passfault.appspot.com/password_strength.html can measure password strength based on length of time it would take to crack from known patterns and cost of hardware employed to do so. And this, of course, excludes that passwords are often re-used on multiple sites and the risk that your password is already in someone else's database. What this really highlights is that, like fingerprints, it's a lot easier to accidentally share things that can uniquely or partially identify you than to cover up and stay anonymous. (Or find a nice middle ground, pretending to be someone else, say.) There's a lot of security through obscurity that we tend to trust -- that people won't investigate my identity simply because they've no reason to. And so it's worrisome when you see it happen to others. See also: http://pandodaily.com/2013/10/26/i-challenged-hackers-to-investigate-me-and-what-they-found-out-is-chilling/ http://pandodaily.com/2013/10/26/i-challenged-hackers-to-inv...

by korethr 13y ago

deleted 13y ago

[deleted]

ludwigz 13y ago

We have what we call "Liberté d'expression" http://fr.wikipedia.org/wiki/Libert%C3%A9_d'expression http://fr.wikipedia.org/wiki/Libert%C3%A9_d'expression but it's limitated by the law. For example you can't say racists things in public.

camus2 13y ago
Lol,there is no "Liberté d'expression" in France. Even if you say something the most gentle way you'll get sued because you said so. There is only "la liberté d'exprimer son accord avec la pensée unique". But things might change, for better or worst. France is living a very interesting time. Things can blow up anytime.
- abolibibelot 13y ago
  I'm curious to see some references and figures here. As far as I know, only Hate Speech, and holocaust-denial are forbidden. Libel laws apply too, and some people are trigger-happy with them though.
  - patrickaljord 13y ago
    But accusations of Hate Speech are being broadly abused. For example, a guy I disagree with on almost every issues (economy and immigration) Eric Zemmour was accused and found guilty of hate speech for saying that most people in jail are Arabs in France. This is a fact that was confirmed by many judges and yet the guy was still sentenced cause he hurt some people's sensitivity (I guess...). I'm half Arab myself and still it's obvious to me that most people in jail in France are Arabs (mostly cause they're the poorer), but still, it's true.
    - abolibibelot 13y ago
      Yep, as much as I despise Zemmour, the lawsuits against him are inept. He's the ultimate troll and thrives on contreversy (and whines about "la pensée unique" while being invited pretty much everywhere on TV). Even the laws against holocaust denial are counter productive, since they make the deniers loonies look like martyrs.
- ludwigz 13y ago
  This is obviously a troll...

orborde 13y ago

This could equally well have been done to an SHA1 implementation. MD5 is not especially susceptible to brute-force preimage attacks.

deleted 13y ago

[deleted]

maximegarcia 13y ago

The freedom of speech is a right guaranteed, but it comes with some (minor in fact) limitations : incitement to hatred, discrimination, slander and racial insults ; racist, anti-Semite, or xenophobic activities (so including the promotion via speech), Holocaust denial ; hatred against people because of their gender, sexual orientation, or disability are prohibited and can even be sentenced with jail time for some of those. http://en.wikipedia.org/wiki/Freedom_of_speech_by_country#France http://en.wikipedia.org/wiki/Freedom_of_speech_by_country#Fr...

byroot 13y ago

> I was surprised to read that the right to freedom of speech is not recognized in France. It is. The french constitution state: > La libre communication des pensées et des opinions est un des droits les plus précieux de l’homme ; tout citoyen peut donc parler, écrire, imprimer librement, sauf à répondre de l’abus de cette liberté dans les cas déterminés par la loi. Which mean that you have free speech, BUT, you can be prosecuted if you abuse it as defined by the law. Example of common abuses: defamation (the most common), incitement to ethnic or racial hatred, privacy violation, historical revisionism, intellectual property infringement, etc. But except "incitement to ethnic or racial hatred" and "historical revisionism" it's mostly the same in the US. Also, it's not all about the law, during the same sex marriage debates, a lot of homosexual people got beaten by far right / nazi-like groups.

haiduc 13y ago
> a lot of homosexual people got beaten by far right / nazi-like groups. This IS a lie. Do you have any sources? There have been one attack on a gay couple, hugely used by the government and their supporting medias. Newspapers have implies (no facts) that the culprits where members of the strike against same sex marriage or far right activists. There was then a huge huge buzz to shame the strikers. And finally, 4 months later, the police arrested 4 youths: 3 in a "cité" (public housing, "ghetto") and one was already in jail, all of them well known of the police services for violence facts. http://www.leparisien.fr/paris-75/agression-homophobe-a-paris-les-auteurs-presumes-arretes-20-09-2013-3153685.php http://www.leparisien.fr/paris-75/agression-homophobe-a-pari... Some people in the comments do say that the police delayed the arrest so that the government could shame the protesters against same sex marriage. One more thing, the man beaten reacts to the arrest on a far left web site. https://bellaciao.org/fr/spip.php?article137205 https://bellaciao.org/fr/spip.php?article137205 And he is in a complete deny, not being able to recognize that those who beat him have nothing in common with those that protested against same sex marriage.
- byroot 13y ago
  > This IS a lie. Do you have any sources? What's the "lie", the aggressions or the fact that it come from far right groups ? If the former: http://www.france24.com/fr/20130421-climat-homophobie-agression-insecurite-mariage-pour-tous-extremisme http://www.france24.com/fr/20130421-climat-homophobie-agress... > 1200 aggressions on homosexual people in the first 3 months of 2013 compared to 1 556 on the whole 2011. Almost 4 times more than usual, is it enough for you ? About the authors of the aggressions: http://www.lemonde.fr/societe/article/2013/09/04/bar-gay-saccage-a-lille-un-an-de-prison-requis_3471318_3224.html http://www.lemonde.fr/societe/article/2013/09/04/bar-gay-sac... Are skinheads far-right enough for you ? But off course, skinheads are probably not behind ALL these aggressions, most of them are probably "standard" homophobics.

bigiain 13y ago

"What this shows to me is that md5 needs to die." No. MD5 needs to stop being used in inappropriate ways. Switching rsync to bcrypt, scrypt, or pbkdf2 for it's hashing is _not_ a sensible idea. Using "fast hashes" for cryptographic level protection is not a sensible idea. MD5 still has a great many uses. Killing it off because some people use it for the wrong things is shortsighted at best…

olivier1664 13y ago
Does there is a secure enough Hash function for Gravatar usage?
- bigiain 13y ago
  That's kind-of a non-question. If you assume that "Gravatar usage" means uses a unique identifier for me across multiple websites, and that "secure enough" means that it doesn't leak information about my identity – then the question becomes nonsense: "Is there a way to uniquely identify me across multiple websites that doesn't uniquely identify me?"

lstamour 13y ago

Related to cracking with a GPU: https://passfault.appspot.com/password_strength.html https://passfault.appspot.com/password_strength.html can measure password strength based on length of time it would take to crack from known patterns and cost of hardware employed to do so. And this, of course, excludes that passwords are often re-used on multiple sites and the risk that your password is already in someone else's database. What this really highlights is that, like fingerprints, it's a lot easier to accidentally share things that can uniquely or partially identify you than to cover up and stay anonymous. (Or find a nice middle ground, pretending to be someone else, say.) There's a lot of security through obscurity that we tend to trust -- that people won't investigate my identity simply because they've no reason to. And so it's worrisome when you see it happen to others. See also: http://pandodaily.com/2013/10/26/i-challenged-hackers-to-investigate-me-and-what-they-found-out-is-chilling/ http://pandodaily.com/2013/10/26/i-challenged-hackers-to-inv...