fuse-esb: denial of service
Posted Jan 4, 2013 9:49 UTC (Fri) by epa
Parent article: fuse-esb: denial of service
They have replaced Murmurhash (which is known to have collision vulnerabilities) with 'the Perl hash function'. But Perl is moving away from its current hashing to use SipHash instead, at least on 64-bit platforms. The existing Perl hash function ('natatime') is believed to be better than Murmurhash, but not ideal.
to post comments)