Kinda wild hearing about anything even using MD4. I remember doing an MD5 attack in a security class like 20 years ago. Obviously that kinda what this whole article is about but literally the first time ever hearing "MD4".
tptacek•30m ago
Notably, those attacks aren't problematic in the setting MD4 is used in here (but the "outer" construction iterating it is deeply problematic).
philodeon•56m ago
When you turn off the bad cryptography, the product becomes unusable.
The purpose of a system is what it does.
lousken•50m ago
just like windows 11 gui, security on windows is like putting lipstick on a pig
gleenn•1h ago
tptacek•30m ago