philodeon an hour ago

When you turn off the bad cryptography, the product becomes unusable.

The purpose of a system is what it does.

  • ethanwillis 3 minutes ago

    That quote would mean that the system being unusable without RC4 is exactly the point.

    It doesn't mean that a system is what its makers intended for it to do.

gleenn an hour ago

Kinda wild hearing about anything even using MD4. I remember doing an MD5 attack in a security class like 20 years ago. Obviously that kinda what this whole article is about but literally the first time ever hearing "MD4".

  • tptacek 37 minutes ago

    Notably, those attacks aren't problematic in the setting MD4 is used in here (but the "outer" construction iterating it is deeply problematic).

lousken an hour ago

just like windows 11 gui, security on windows is like putting lipstick on a pig