[Python-Dev] Hash collision security issue (now public)

Georg Brandl g.brandl at gmx.net
Mon Jan 2 18:38:41 CET 2012

On 01/02/2012 04:47 PM, Christian Heimes wrote:
> Am 01.01.2012 19:45, schrieb Terry Reedy:
>> On 1/1/2012 10:13 AM, Guido van Rossum wrote:
>>> PS. Is the collision-generator used in the attack code open source?
>> As I posted before, Alexander Klink and Julian Wälde gave their project 
>> email as hashDoS at alech.de. Since they indicated disappointment in not 
>> hearing from Python, I presume they would welcome engagement.
> Somebody should contact Alexander and Julian to let them know, that we
> are working on the matter. It should be somebody "official" for the
> initial contact, too. I've included Guido (BDFL), Barry (their initial
> security contact) and MvL (most prominent German core dev) in CC, as
> they are the logical choice for me.
> I'm willing to have a phone call with them once the contact has been
> established. IMHO it's slightly easier to talk in native tongue --
> Alexander and Julian are German, too.

I wouldn't expect too much -- they seem rather keen on cheap laughs:



More information about the Python-Dev mailing list