<story><title>Reports of SHA-1&apos;s demise are considerably exaggerated</title><url>http://www.metzdowd.com/pipermail/cryptography/2017-February/031604.html</url></story><parent_chain></parent_chain><comment><author>simias</author><text>It&amp;#x27;s not a particularly interesting email, I don&amp;#x27;t think it&amp;#x27;s bringing anything new on the table. The title also doesn&amp;#x27;t have anything to do with the contents (I understand that might be because of HN submission rules but it&amp;#x27;s very misleading in this case).&lt;p&gt;It&amp;#x27;s a bit hard to take the author seriously when he complains about &amp;quot;headless chickens&amp;quot; &amp;quot;considerably exaggerat[ing]&amp;quot; then goes on to say that you need &amp;quot;a nation-state&amp;#x27;s worth of resources&amp;quot; to find collisions. If anything this shattered proof of concept showed that it was actually a lot easier than that, giving an estimate of around 110k$ IIRC.&lt;p&gt;I&amp;#x27;m also sure that SHA-1 remains pervasive in many codebases, although as long as pre-image are impractical it might be hard to exploit those vulnerabilities.</text></comment>
<story><title>Reports of SHA-1&apos;s demise are considerably exaggerated</title><url>http://www.metzdowd.com/pipermail/cryptography/2017-February/031604.html</url></story><parent_chain></parent_chain><comment><author>dz0ny</author><text>Well SVN is affected if you commit crafted pdf :)&lt;p&gt;&lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;i.imgur.com&amp;#x2F;iJZe21Z.png&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;i.imgur.com&amp;#x2F;iJZe21Z.png&lt;/a&gt;
Rel: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=13725093&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=13725093&lt;/a&gt;</text></comment>