Re: SHA1 collisions proven possisble

On Wed, 01 Mar 2017 15:28:23 -0600, "james.d--- via NANOG" said:

Those statistics are nowhere near real world for ROI. You'd have to invest at least 7 figures (USD) in resources. So the return must be millions of dollars before anyone can detect the attack. Except, it's already detectable.

*Somebody* has to invest 7 figures in resources. Doesn't have to be you. Remember that if you have access to a 1M node botnet, you could have 56,940,000 hours of CPU time racked racked up in... under 60 hours.