Hi! > > It's possible to generate another object with the same hash, but: > > Yeah - the real check is that the modified object has to > compile and do something useful for someone (the cracker > if no one else). > > Just getting a random bucket of bits substituted for a > real kernel source file isn't going to get me into the > cracker hall of fame, only into their odd-news of the > day.
I actually two different files with same md5 sum in my local CVS repository. It would be very wrong if CVS did not do the right thing with those files. Yes, I was playing with md5, see "md5 to be considered harmfull today". And I wanted old version of my "exploits" to be archived. Pavel -- Boycott Kodak -- for their patent abuse against Java. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/