search
cryptographic hashes
Trends
- 1Broken MD2 hash algorithm found in Filen encrypted cloud storage●When did you last see MD2 in prod? I found it in Filen, a "zero-knowledge" end-to-end encrypted cloud storage: https://
A security researcher reports finding the MD2 hash algorithm, which has been considered broken since the 1990s, still in use in Filen, a cloud storage service marketed as zero-knowledge end-to-end encrypted. In a blog post, the researcher questions why a deprecated cryptographic primitive is running in production, and raises broader doubts about whether browser-based cryptography can offer meaningful protection for encrypted storage services.
- 2Developers Urged to Pin Dependencies for Supply Chain Security●Security Tip: In modern development, "latest" is a moving target. 🛡️ To secure your software supply chain, pin your depe
Security experts are reminding developers that relying on the "latest" version of software dependencies is risky, since the code can change without warning. The advice is to pin dependencies to specific versions, or better, cryptographic hashes, so that what was tested is exactly what gets deployed, protecting projects from tampering and supply chain attacks.