The SHA1 hash function is now completely unsafe
-
Researchers have achieved the first practical SHA-1 collision, generating two PDF files with the same signature
-
If you burn 110K in cash.
And have a team of cyber security experts. -
When you're trying to steal millions, 100K is nothing.
And of course, this cost will likely fall pretty quickly.
-
@Dashrender said in The SHA1 hash function is now completely unsafe:
When you're trying to steal millions, 100K is nothing.
And of course, this cost will likely fall pretty quickly.
How often does one SHA breach net you millions? Sometimes, certainly.
-
@scottalanmiller said in The SHA1 hash function is now completely unsafe:
@Dashrender said in The SHA1 hash function is now completely unsafe:
When you're trying to steal millions, 100K is nothing.
And of course, this cost will likely fall pretty quickly.
How often does one SHA breach net you millions? Sometimes, certainly.
Spearphishing.
-
@Dashrender said in The SHA1 hash function is now completely unsafe:
@scottalanmiller said in The SHA1 hash function is now completely unsafe:
@Dashrender said in The SHA1 hash function is now completely unsafe:
When you're trying to steal millions, 100K is nothing.
And of course, this cost will likely fall pretty quickly.
How often does one SHA breach net you millions? Sometimes, certainly.
Spearphishing.
I don't follow. How does spearphishing combine with SHA in a general sense?
-
@Breffni-Potter said in The SHA1 hash function is now completely unsafe:
If you burn 110K in cash.
And have a team of cyber security experts.Today, yes. But in six months it'll be a script and $30K in compute power. In two years it'll be $500 of AWS time.
