[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Guile 1.7.91 has been released.

From: Marius Vollmer
Subject: Re: Guile 1.7.91 has been released.
Date: Tue, 14 Feb 2006 21:39:44 +0200
User-agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.50 (gnu/linux)

address@hidden (Ludovic Courtès) writes:

>> Well, they get to choose both texts that have a MD5 collision.
>> Looking at the PostScript source reveals that the texts have been
>> rigged, which should be enough if this goes to court.  In our case, an
>> attacker would need to find a second meaningful text that collides
>> with the text that we provide.  I guess that is much harder to do.
> Well, since *you* are malicious, you could very well have prepared a
> second tarball whose MD5 is the same and which you will propagate
> during the days following the announcement.  ;-)

Ahh, that never occured to me... I don't tend to think of _me_ as the
bad guy.. :-)

GPG: D5D4E405 - 2F9B BCCC 8527 692A 04E3  331E FAF8 226A D5D4 E405

reply via email to

[Prev in Thread] Current Thread [Next in Thread]