New answers tagged operating-systems
The issue is now addressed in the paper signify: Securing OpenBSD From Us To You by Ted Unangst (BSDCan, 2015). In summary: Requiring mirrors to use HTTPS, and any other reliance on HTTPS, was rejected. As noted by other answers here, securing only the connection between users and mirrors does not secure the transit of artifacts from developers to ...
They r feasibly safe in the sense that in order to compute 2^160 hash computations which r technologically infeasible. And you don't need to worry of downloading an .iso of windows while u can create an .iso from install.esd files from some1's Genuine windows copy(if u r little bit paranoid).
For a malicious attacker who tries to alter an ISO file while keeping its hash value identical to the hash value of the "genuine" file, the problem is known as a second preimage attack. No such attack is known for SHA-1 right now; if somebody wanted to compute such a second preimage, he would have to pay a cost of about 2160 hash function computations, which ...
But it is only about making channels unidirectional. It suggests that security for bidirectional channels has already been solved, but I cannot find more information. It suggests that a bi-directional channel is simply a pair of uni-directional channels. Btw, they hardly "solve" the problem of uni-directional channels, due to the "back channels" ...
Top 50 recent answers are included