3 ms·
People still using MD5sums for file integrity? Wut! Wut? Wut ?! Collision attacks were successfully used in Flames. http://www.forbes.com/sites/richardstienno
by julie1 11y ago
People still using MD5sums for file integrity?
Wut! Wut? Wut ?!
Collision attacks were successfully used in Flames. http://www.forbes.com/sites/richardstiennon/2012/06/14/flames-md5-collision-is-the-most-worrisome-security-discovery-of-2012/ http://www.forbes.com/sites/richardstiennon/2012/06/14/flame...
MD5 = obsolete.
- johnchristopher 11y ago> One researcher claims that the expense of carrying out the collision could be as high as $200K. There is little doubt that Flame was created by a nation state with considerable technical resources. Somehow I doubt Linux Mint is worth that price tag. And you wouldn't use a rolling-based debian derivative for sensible data, would you ? It's true SHA-1 costs the same as MD5 so it'd be easy to satisfy everyone though.
- julie1 11y agowell it is like s2n (other news) providing the RC4 cipher that is also obsolete for 15 years at least. Who cares, it is not as if your secrets or money were transiting on the internet.
- johnchristopher 11y agoCome on, that md5 hash is only useful for verifying the download wasn't corrupted or incomplete. Nobody aw re of security would rely on it for anything else. A hash of the iso wouldn't prevent the tampering of critical files up the chain.