Bhavin Gandhi @bhavin192@toots.dgplug.org

We have computed the very first chosen-prefix collision for SHA-1. To put it in another way: all attacks that are practical on MD5 are now also practical on SHA-1.

We have reduced the cost of a collision attack from 2^64.7 to 2^61.2, and the cost of a chosen-prefix collision attack from 2^67.1 to 2^63.4.

Demo: The legacy branch of GnuPG (version 1.4) is vulnerable. We have created two PGP keys with different UserIDs and colliding certificates.

https://sha-mbles.github.io/

#36c3 and it's a wrap!

If you want to download video/audio of all the awesome talks, here's your yearly reminder that I wrote a little console tool called "sync3c" to automatically filter & sync talks from any #ccc event for you:

github.com/muesli/sync3c

Presenting ShoeTool - Happy Holidays from the FSF https://www.fsf.org/blogs/community/presenting-shoetool-happy-holidays-from-the-fsf

Is this enough click-baity?
#linux #krita #photoshop

https://www.hellozee.dev/linux_doesnt_have_photoshop/

you want podcasts? @bhavin192 gives you podcasts!

https://geeksocket.in/podcasts-list/

RT @FarOutAkhtar@twitter.com

Here’s what you need to know about why these protests are important. See you on the 19th at August Kranti Maidan, Mumbai. The time to protest on social media alone is over.

🐦🔗: https://twitter.com/FarOutAkhtar/status/1207143874138910720

Please amplify this excellent bit of investigation!

Delhi Police are torching broken buses and blaming protesting students. #Jamia #NRC_CAB #studentprotests
https://mobile.twitter.com/SquareGas/status/1206220921247191041

Jamia Violence : SC Declines To Intervene; Asks Petitioners To Move High Courts https://www.livelaw.in/top-stories/jamia-violence-sc-declines-to-intervene-asks-petitioners-to-move-high-courts-150883

The 2019 Design Tools Survey https://uxtools.co/survey-2019/ #UI #UX

Jessie Frazelle (formerly of GitHub, Microsoft, and Google) just launched a new computer company called Oxide Computer Company

https://oxide.computer/

Her blog post about it: https://blog.jessfraz.com/post/born-in-a-garage/

The Go User Survey 2019:

https://google.qualtrics.com/jfe/form/SV_b1xqnBCMpZAhJZ3

Let the #golang community know what you like and/or dislike about the language and its development process!