http://torzcd47rw4qh36g4yqxvv2tmifgmu6jjalkyqz4e4lzzwtfdfc7qaqd.onion/the-samba-logon-bug-caused-by-outdated-crypto-mobile-hacker-for-hire/index.html
But if you start with two identical inputs and carefully insert a deliberately-calculated pair of “collision-building” chunks at the same point in each input stream, you can reliably create MD5 collisions in seconds, even on a modest laptop. For example, here’s a Lua program we wrote that can conveniently be chopped into three distinct sections, each 128 bytes long. There’s a code prefix that ends with a line of text that starts a Lua comment (the string starting --[== in...