A hash collision vulnerability exists in a number of frameworks, including PHP, Ruby, and ASP.NET. Microsoft has released a patch to fix ASP.NET. Rafael Rivera criticizes the relatively short amount of time before full disclosure and links to a cutesy Microsoft video on the topic. My problem with the video is that, although some companies…
Final Score: U-S-A! 1, USSR 0
20 years of Winning.