[Python-Dev] Hash collision security issue (now public)

Christian Heimes lists at cheimes.de
Sun Jan 1 16:30:26 CET 2012


Am 31.12.2011 23:38, schrieb Terry Reedy:
> On 12/31/2011 4:43 PM, PJ Eby wrote:
>>> Here's an idea. Suppose we add a sys.hash_seed or some such, that's
>> settable to an int, and defaults to whatever we're using now. Then
>> programs that want a fix can just set it to a random number,
>> I do not think we can allow that to change once there are hashed 
> dictionaries existing.

Me, too. Armin suggested to use an env var as random.


More information about the Python-Dev mailing list

AltStyle によって変換されたページ (->オリジナル) /