|
Title: md5? Post by: fresno on July 18, 2010, 04:16:55 PM I don't seem to be able to find any md5s for your code downloads. Is it just me, or are there none?
Title: Re: md5? Post by: Mionione on July 18, 2010, 08:52:19 PM md5 checksums are still widely used but not secure
Title: Re: md5? Post by: Mionione on July 18, 2010, 09:33:47 PM md5 is evil, two differents files can have the same md5 checksum (http://www.coresecurity.com/content/md5-harmful)
but unfortunately people still use it ;( Title: Re: md5? Post by: knightmb on July 18, 2010, 09:48:45 PM md5 is evil, two differents files can have the same md5 checksum (http://www.coresecurity.com/content/md5-harmful) but unfortunately people still use it ;( They can, but the odds that you'll get useful exploit code that just happens to be that collision are still insanely high. Title: Re: md5? Post by: lachesis on July 19, 2010, 12:36:41 AM Nah, it's insanely easy nowadays. Have you seen evilize?
http://www.mscs.dal.ca/~selinger/md5collision/ Title: Re: md5? Post by: d1337r on July 19, 2010, 07:19:50 AM Yeah... In earlier days, you could easily set an 8-letter Upper-Lower-Digit password and be sure no one will be interested in cracking it (which he will do for 30 days minimum). Now, we have Playstation 3's and cloud services, and cracking that MD5 is a matter of minutes or hours. Now i'll have to change every my password to something stronger.
BTW, SMF FTW, cause it uses SHA-256 instead of MD5. Title: Re: md5? Post by: fresno on July 20, 2010, 05:39:00 PM Yeah, I guess SHA-256 will be good enough. ;-)
Title: gpg! Post by: bitcoinex on July 25, 2010, 09:16:03 PM Hashes are good but it's already time to start doing gpg-signatures to tarball. Suffice it now to hack the site or even deception to obtain control over the wiki, put "fresh" version of the client and everything collapses.
Title: Re: md5? Post by: satoshi on July 25, 2010, 10:06:57 PM For future reference, here's my public key. It's the same one that's been there since the bitcoin.org site first went up in 2008. Grab it now in case you need it later.
http://www.bitcoin.org/Satoshi_Nakamoto.asc |