Related to my previous post on MS discontinuing use of MD5 in Vista...
Here's some proof of concept code written in .NET - creates an 'evil' exe with the same MD5 checksome as the 'good' exe:
The Code Project - Exploiting MD5 collisions (in C#) - .NET
9.23.2005
Exploiting MD5 collisions (in C#) - .NET
9.16.2005
CISSP Exam Results!
Well, I've passed the exam - that takes a load off. Now comes the endorsement phase.
Microsoft Scraps Old Encryption in New Code
Found this article on a /. post.
In light of some recent (and not so recent) problems with older hashing algorithms - DES, MD4, MD5, and newer issues with SHA-1 Microsoft is removing support for them in Vista.
Microsoft Scraps Old Encryption in New Code
Glad to MS is keeping in step with security developments.
9.14.2005
Google Deskbar Memory Leak!
Aparently the new Google Deskbar has a memory leak. Today I caught it eating around 1.5GB of RAM!!
CISSP
Just took the CISSP Certification test this past weekend in Cleveland. Now am just waiting to get the results in the mail!
First Post!
Just putting something up.
Blogspot really makes choosing a url difficult - i tried about 500 clearly untaken BlogSpot URL's and finally when i typed http://choosing-a-blog-url-sucks.blogspot.com/ it took it, so seems reasonable enough.

