full-disclosure - Re: Case ID 51560370 - Notice of ClaimedInfringement

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri Apr  8 00:11:44 2005
From: poof at fansubber.com (Poof)
Subject: Re: Case ID 51560370 - Notice of
	ClaimedInfringement

Ahh, but what if said user is falsifying MD5sums with same size files in
order to help hinder piracy of said product?

In order to say that -I- am sharing Fedora.iso(Just an example.) you'd have
to download it and run it yourself. You can't just say that the MD5sum,
size, and name all match so it has to be the same product.

That's why if you wanted, you could sell bags of flour as cocaine and not be
charged with drug dealing. Fine, it looks the same and weighs the same,
however it isn't the product that's illegal. And to prove that it's illegal,
they need to test it.

You know what... I should just shut up. I always write sucky posts to FD.

~

> You forget that the hash is not the only unique thing that specific file
> has in common with the pirated file/material.
> 
> Calculate the following probability:
> 
> - The file/chunck has the same MD5 (or whatever HASH)
>   as the pirated material in question.
> - The file has the EXACT same filename (if there would be a collission
> how is the probability in mathametic terms that the file the
> collission takes place has the exact same filename?)
> - The file has the EXACT same size (The file has the EXACT same date
> etc.pp)
> 
> I am sorry, but considering all these factors don't we have to conlude the
> file is indeed THE file ? ;)
> 
> <Wild Speculation> Do the maths you probably get to a possibility which is
> equally likely
> then a parental test based on DNA, which is accepted in some courts.</Wild
> Speculation>