At Toorcon this year, Dan Kaminsky showed a way to create two different webpages that render properly in a browser but have the same MD5 hash. Anybody who thinks this attack is theortical and ignorable is grossly mistaken.
Same thing has been done with postscript files, but neither is a result of breaking MD5. HTML and PS include the ability to embed logic in the page. Two identical web pages with javascript that says if(location.href==goodpage) { render one thing } else { render the other thing } will appear to defeat MD5.
Isn't it outside the scope of science to try to say what the origin of the universe is? The interpretation of this data relies on far too much flimsy theory to be credible IMHO. Dark matter, for example, still can't even be detected. We only 'know' it exists because it MUST exist for the current model of cosmogeny to be valid. I for one would rather see a 'we report, you decide' approach to this stuff. Tell me what you found, sans comment.
Slashdot Mirror
At Toorcon this year, Dan Kaminsky showed a way to create two different webpages that render properly in a browser but have the same MD5 hash. Anybody who thinks this attack is theortical and ignorable is grossly mistaken.
Same thing has been done with postscript files, but neither is a result of breaking MD5. HTML and PS include the ability to embed logic in the page. Two identical web pages with javascript that says if(location.href==goodpage) { render one thing } else { render the other thing } will appear to defeat MD5.
Isn't it outside the scope of science to try to say what the origin of the universe is? The interpretation of this data relies on far too much flimsy theory to be credible IMHO. Dark matter, for example, still can't even be detected. We only 'know' it exists because it MUST exist for the current model of cosmogeny to be valid. I for one would rather see a 'we report, you decide' approach to this stuff. Tell me what you found, sans comment.