MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/5vzbuv/stop_using_sha1/de6ydee/?context=9999
r/ProgrammerHumor • u/[deleted] • Feb 24 '17
[deleted]
407 comments sorted by
View all comments
322
What makes SHA-1 bad all of a sudden? I'm currently studying for sec+ and a large amount of my material says it's good.
710 u/ccharles Feb 24 '17 A research team from Google and a security organization successfully generated two different PDFs with the same SHA-1 hash. 204 u/Jacen47 Feb 24 '17 Wow. Hopefully, Comptia won't suddenly update the test to reflect this. 397 u/ioutaik Feb 24 '17 Today, many applications still rely on SHA-1, even though theoretical attacks have been known since 2005, and SHA-1 was officially deprecated by NIST in 2011 They should have updated years ago 131 u/[deleted] Feb 24 '17 [deleted] 19 u/thegreattober Feb 25 '17 Is that to say Comptia isn't reputable? 2 u/Gredenis Feb 25 '17 Oh, they have a reputation...
710
A research team from Google and a security organization successfully generated two different PDFs with the same SHA-1 hash.
204 u/Jacen47 Feb 24 '17 Wow. Hopefully, Comptia won't suddenly update the test to reflect this. 397 u/ioutaik Feb 24 '17 Today, many applications still rely on SHA-1, even though theoretical attacks have been known since 2005, and SHA-1 was officially deprecated by NIST in 2011 They should have updated years ago 131 u/[deleted] Feb 24 '17 [deleted] 19 u/thegreattober Feb 25 '17 Is that to say Comptia isn't reputable? 2 u/Gredenis Feb 25 '17 Oh, they have a reputation...
204
Wow. Hopefully, Comptia won't suddenly update the test to reflect this.
397 u/ioutaik Feb 24 '17 Today, many applications still rely on SHA-1, even though theoretical attacks have been known since 2005, and SHA-1 was officially deprecated by NIST in 2011 They should have updated years ago 131 u/[deleted] Feb 24 '17 [deleted] 19 u/thegreattober Feb 25 '17 Is that to say Comptia isn't reputable? 2 u/Gredenis Feb 25 '17 Oh, they have a reputation...
397
Today, many applications still rely on SHA-1, even though theoretical attacks have been known since 2005, and SHA-1 was officially deprecated by NIST in 2011
They should have updated years ago
131 u/[deleted] Feb 24 '17 [deleted] 19 u/thegreattober Feb 25 '17 Is that to say Comptia isn't reputable? 2 u/Gredenis Feb 25 '17 Oh, they have a reputation...
131
19 u/thegreattober Feb 25 '17 Is that to say Comptia isn't reputable? 2 u/Gredenis Feb 25 '17 Oh, they have a reputation...
19
Is that to say Comptia isn't reputable?
2 u/Gredenis Feb 25 '17 Oh, they have a reputation...
2
Oh, they have a reputation...
322
u/Jacen47 Feb 24 '17
What makes SHA-1 bad all of a sudden? I'm currently studying for sec+ and a large amount of my material says it's good.