[Python-Dev] Status of the fix for the hash collision vulnerability

Sat Jan 14 04:45:57 CET 2012

> What an implementation looks like:
>> http://pastebin.com/9ydETTag
>> some stuff to be filled in, but this is all that is really required.

I think this statement (and the patch) is wrong. You also need to change
the byte string hashing, at least for 2.x. This I consider the biggest
flaw in that approach - other people may have written string-like objects
which continue to compare equal to a string but now hash different.
Regards,
Martin