Stories
Slash Boxes
Comments

SoylentNews is people

posted by cmn32480 on Sunday February 26 2017, @09:42PM   Printer-friendly
from the just-take-it-out-back-and-shoot-it-already dept.

Thursday's watershed attack on the widely used SHA1 hashing function has claimed its first casualty: the version control system used by the WebKit browser engine, which became completely corrupted after someone uploaded two proof-of-concept PDF files that have identical message digests.

The bug resides in Apache SVN, an open source version control system that WebKit and other large software development organizations use to keep track of code submitted by individual members. Often abbreviated as SVN, Subversion uses SHA1 to track and merge duplicate files. Somehow, SVN systems can experience a severe glitch when they encounter the two PDF files published Thursday, proving that real-world collisions on SHA1 are now practical.

On Friday morning, the researchers updated their informational website to add the frequently asked question "Is SVN affected?" The answer:

"Yes - please exercise care, as SHA-1 colliding files are currently breaking SVN repositories. Subversion servers use SHA-1 for deduplication and repositories become corrupted when two colliding files are committed to the repository. This has been discovered in WebKit's Subversion repository and independently confirmed by us. Due to the corruption the Subversion server will not accept further commits."

Source: ArsTechnica


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2, Touché) by butthurt on Sunday February 26 2017, @11:51PM (3 children)

    by butthurt (6141) on Sunday February 26 2017, @11:51PM (#472040) Journal

    It's probably for the beta.

    /meta/article.pl?sid=17/02/12/1618241 [soylentnews.org]

    Starting Score:    1  point
    Moderation   +1  
       Touché=1, Total=1
    Extra 'Touché' Modifier   0  

    Total Score:   2  
  • (Score: 4, Funny) by Anonymous Coward on Monday February 27 2017, @01:27AM (2 children)

    by Anonymous Coward on Monday February 27 2017, @01:27AM (#472065)

    Fuck Beta! Time to start over once again. Any thoughts on the next site name? I say we go with a navy blue color scheme.

    • (Score: 1, Funny) by Anonymous Coward on Monday February 27 2017, @10:29AM

      by Anonymous Coward on Monday February 27 2017, @10:29AM (#472195)

      Soylent Blues.

      We can have some smooth jazz auto-played.

    • (Score: 2) by DECbot on Monday February 27 2017, @07:55PM

      by DECbot (832) on Monday February 27 2017, @07:55PM (#472490) Journal

      What? and copy Pipedot?

      If we want unique, go for OMGPonies everyday, not just April Fools Day.

      --
      cats~$ sudo chown -R us /home/base