Quote:
Originally Posted by scriptless
There is a good example (if you have source) to make 2 programs (1 good, and 1 malicious) and they bot have the same filezise, checksum, and what not but do completly different tasks.
|
Sure, if you have the source you can compile the program down with junk data to match the MD5 checksum, but the point in this case is that would be entirely impossible with format that is binary-encoded and can't be easily reverse-engineered.
The complexity of an MD5 collision is still 2^32, and with the added complexity of the format you are trying to engineer a hack into, I stand by my original statement.