While not directly related to programming, I thought that this would be the best place to get the answer to this question. We are looking into some backup software (data de-duplication is all the rage ...

This is an explanation of the Web Exploitation challenge 'It is my Birthday' from the CyLab Security Academy (formerly ...

There is a fair amount of confusion surrounding the recent research resulting in the ability to create bogus SSL certificates. The research combined a weakness in the certificate generation process ...

It would likely help if certificates could use multiple hash functions, but I don't believe that the X.509 standard allows for that. If it allows interchangeable hash functions then simply define the ...

A design flaw in the decades-old RADIUS authentication protocol allows attackers to take over network devices from a man-in-the-middle position by exploiting MD5 hash collisions. The “secure enough” ...

The details of the collision attack used by the Flame malware authors to create a forged code-signing certificate for Microsoft code are beginning to emerge, and the company said that the attackers ...

Researchers have demonstrated new collision attacks against SHA-1 and MD5 implementations in TLS, IKE and SSH. If you’re hanging on to the theory that collision attacks against SHA-1 and MD5 aren’t ...

The old and insecure MD5 hashing function hasn’t been used to sign SSL/TLS server certificates in many years, but continues to be used in other parts of encrypted communications protocols, including ...

The chance is much bigger (because MD5 collisions can be forced; one can spew out different 128 kibyte blocks all day long that hash identically; if one then incorporates them into one's files then ...