Cloudbleed and SHA-1 Collision with Max Burkhardt

http://traffic.libsyn.com/sedaily/CloudbleedwithHaseeb.mp3Podcast: Play in new window | Download Thursday February 23rd was a big day in security news: details were published about the Cloudbleed bug, which leaked tons of plaintext requests from across the Internet into plain view. On the same day, the first collision attack against SHA-1 was demonstrated by researchers at Google, foretelling the demise of SHA-1 as a safe hashing function. What does this mean for the average

Continue reading…