4 ms·
I assume if that's the objective they just maintain a list of domains they are looking for and match their hashes to the ones they fetch from the users. I gues
by simias 13y ago
I assume if that's the objective they just maintain a list of domains they are looking for and match their hashes to the ones they fetch from the users.
I guess it's a way for them to pretend they're not actually invading the user's privacy, just looking for certain websites. That's pretty weak though.
- vinceguidry 13y agoWell, look at it this way, if you were a programmer for Valve looking to solve that problem, wouldn't you think MD5 is decent enough? A stronger algorithm + salt would be slower for no real benefit.
- simias 13y agoI meant it was a "weak" excuse, you're right that a stronger algorithm wouldn't change much. In fact, after reading the code and the rest of the thread I'm starting to believe it might be for obfuscation rather than protecting the user's "privacy".
- cowsandmilk 13y agoWhy can't the MD5 be to protect their own list? They have a bunch of urls they want to block. They don't want to share the list. They md5 each entry on the list to prevent trivial discovery of these urls.
- simias 13y agoThat's a good point actually, if the check is done locally I'd be curious to know which domains they're looking for. If someone could get the list of hashes I'm sure it wouldn't take long before someone manages to bruteforce them with a rainbow table.
- michaelt 13y agoAssuming it's a list of cheating-related websites you wouldn't even need a rainbow table, you just post the list of hashes to a cheating forum, have forum users compare their DNS entries and post the hits.