[OT] Micro$oft versus security

Simon 'corecode' Schubert corecode at fs.ei.tum.de
Thu Sep 22 09:01:55 PDT 2005


walt wrote:
Nevertheless they have been broken recently (about one year) and for 
MD5 for example single bits can be changed...
Okay, that's why I asked -- I didn't know that.  But why take a year
to break a secure hash when you can use a buffer overrun to gain
access to ten thousand Windows machines in a few minutes ;o)
Oh, maybe I didn't write this clear enough:  the vulnerability was found 
about one year ago.  Adjusting the data so the MD5 sum stays the same is 
a matter of a few cycles.

cheers
  simon
--
Serve - BSD     +++  RENT this banner advert  +++    ASCII Ribbon   /"\
Work - Mac      +++  space for low $$$ NOW!1  +++      Campaign     \ /
Party Enjoy Relax   |   http://dragonflybsd.org      Against  HTML   \
Dude 2c 2 the max   !   http://golden-apple.biz       Mail + News   / \




More information about the Users mailing list