René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Hash collision security issue","articleBody":"BPO | [13703](https://bugs.python.org/issue13703)\n--- | :---\nNosy | @malemburg, @gvanrossum, @tim-one, @loewis, @warsaw, @birkenfeld, @terryjreedy, @gpshead, @jcea, @mdickinson, @pitrou, @tiran, @benjaminp, @serwy, @merwok, @alex, @skrah, @davidmalcolm, @bz2, @markshannon, @ericsnowcurrently, @jimjjewett, @PaulMcMillan\nDependencies | \u003cli\u003ebpo-13704: Random number generator in Python core\u003c/li\u003e\nFiles | \u003cli\u003e[hash-attack.patch](https://bugs.python.org/file24151/hash-attack.patch \"Uploaded as text/plain at 2012-01-06.12:52:20 by @malemburg\")\u003c/li\u003e\u003cli\u003e[SafeDict.py](https://bugs.python.org/file24169/SafeDict.py \"Uploaded as text/plain at 2012-01-08.00:19:14 by v+python\"): SafeDict implementation\u003c/li\u003e\u003cli\u003e[bench_startup.py](https://bugs.python.org/file24223/bench_startup.py \"Uploaded as text/plain at 2012-01-13.00:36:06 by @vstinner\")\u003c/li\u003e\u003cli\u003e[random-8.patch](https://bugs.python.org/file24259/random-8.patch \"Uploaded as text/plain at 2012-01-17.12:21:31 by @vstinner\")\u003c/li\u003e\u003cli\u003e[hash-collision-counting-dmalcolm-2012-01-20-001.patch](https://bugs.python.org/file24286/hash-collision-counting-dmalcolm-2012-01-20-001.patch \"Uploaded as text/plain at 2012-01-20.22:55:12 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[amortized-probe-counting-dmalcolm-2012-01-20-002.patch](https://bugs.python.org/file24288/amortized-probe-counting-dmalcolm-2012-01-20-002.patch \"Uploaded as text/plain at 2012-01-21.03:16:17 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[amortized-probe-counting-dmalcolm-2012-01-21-003.patch](https://bugs.python.org/file24289/amortized-probe-counting-dmalcolm-2012-01-21-003.patch \"Uploaded as text/plain at 2012-01-21.17:02:53 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[hash-attack-2.patch](https://bugs.python.org/file24295/hash-attack-2.patch \"Uploaded as text/plain at 2012-01-23.13:07:23 by @malemburg\")\u003c/li\u003e\u003cli\u003e[hash-attack-3.patch](https://bugs.python.org/file24299/hash-attack-3.patch \"Uploaded as text/plain at 2012-01-23.16:43:23 by @malemburg\")\u003c/li\u003e\u003cli\u003e[integercollision.py](https://bugs.python.org/file24300/integercollision.py \"Uploaded as text/plain at 2012-01-23.16:43:23 by @malemburg\")\u003c/li\u003e\u003cli\u003e[backport-of-hash-randomization-to-2.7-dmalcolm-2012-01-23-001.patch](https://bugs.python.org/file24304/backport-of-hash-randomization-to-2.7-dmalcolm-2012-01-23-001.patch \"Uploaded as text/plain at 2012-01-23.21:31:54 by @davidmalcolm\"): Backport of haypo's random-8.patch to 2.7\u003c/li\u003e\u003cli\u003e[hybrid-approach-dmalcolm-2012-01-25-001.patch](https://bugs.python.org/file24320/hybrid-approach-dmalcolm-2012-01-25-001.patch \"Uploaded as text/plain at 2012-01-25.11:05:43 by @davidmalcolm\"): Hybrid approach to solving dict DoS attack\u003c/li\u003e\u003cli\u003e[hybrid-approach-dmalcolm-2012-01-25-002.patch](https://bugs.python.org/file24324/hybrid-approach-dmalcolm-2012-01-25-002.patch \"Uploaded as text/plain at 2012-01-25.17:49:17 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[optin-hash-randomization-for-3.1-dmalcolm-2012-01-27-001.patch](https://bugs.python.org/file24343/optin-hash-randomization-for-3.1-dmalcolm-2012-01-27-001.patch \"Uploaded as text/plain at 2012-01-28.05:13:27 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[optin-hash-randomization-for-3.1-dmalcolm-2012-01-28-001.patch](https://bugs.python.org/file24353/optin-hash-randomization-for-3.1-dmalcolm-2012-01-28-001.patch \"Uploaded as text/plain at 2012-01-28.23:14:26 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[optin-hash-randomization-for-3.1-dmalcolm-2012-01-29-001.patch](https://bugs.python.org/file24365/optin-hash-randomization-for-3.1-dmalcolm-2012-01-29-001.patch \"Uploaded as text/plain at 2012-01-30.01:39:12 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[unnamed](https://bugs.python.org/file24366/unnamed \"Uploaded as text/x-patch at 2012-01-30.01:44:14 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[optin-hash-randomization-for-3.1-dmalcolm-2012-01-30-001.patch](https://bugs.python.org/file24370/optin-hash-randomization-for-3.1-dmalcolm-2012-01-30-001.patch \"Uploaded as text/plain at 2012-01-30.17:31:15 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[optin-hash-randomization-for-3.1-dmalcolm-2012-01-30-002.patch](https://bugs.python.org/file24371/optin-hash-randomization-for-3.1-dmalcolm-2012-01-30-002.patch \"Uploaded as text/plain at 2012-01-30.22:22:45 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[optin-hash-randomization-for-2.6-dmalcolm-2012-01-30-001.patch](https://bugs.python.org/file24375/optin-hash-randomization-for-2.6-dmalcolm-2012-01-30-001.patch \"Uploaded as text/plain at 2012-01-31.01:34:06 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[results-16.txt](https://bugs.python.org/file24385/results-16.txt \"Uploaded as text/plain at 2012-02-01.03:29:11 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[add-randomization-to-2.6-dmalcolm-2012-02-01-001.patch](https://bugs.python.org/file24391/add-randomization-to-2.6-dmalcolm-2012-02-01-001.patch \"Uploaded as text/plain at 2012-02-02.01:18:06 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[fix-broken-tests-on-2.6-dmalcolm-2012-02-01-001.patch](https://bugs.python.org/file24392/fix-broken-tests-on-2.6-dmalcolm-2012-02-01-001.patch \"Uploaded as text/plain at 2012-02-02.01:18:17 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[add-randomization-to-3.1-dmalcolm-2012-02-01-001.patch](https://bugs.python.org/file24393/add-randomization-to-3.1-dmalcolm-2012-02-01-001.patch \"Uploaded as text/plain at 2012-02-02.01:18:17 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[fix-broken-tests-on-3.1-dmalcolm-2012-02-01-001.patch](https://bugs.python.org/file24394/fix-broken-tests-on-3.1-dmalcolm-2012-02-01-001.patch \"Uploaded as text/plain at 2012-02-02.01:18:23 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[add-randomization-to-2.6-dmalcolm-2012-02-06-001.patch](https://bugs.python.org/file24434/add-randomization-to-2.6-dmalcolm-2012-02-06-001.patch \"Uploaded as text/plain at 2012-02-06.19:07:31 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[fix-broken-tests-on-2.6-dmalcolm-2012-02-06-001.patch](https://bugs.python.org/file24435/fix-broken-tests-on-2.6-dmalcolm-2012-02-06-001.patch \"Uploaded as text/plain at 2012-02-06.19:07:38 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[add-randomization-to-3.1-dmalcolm-2012-02-06-001.patch](https://bugs.python.org/file24436/add-randomization-to-3.1-dmalcolm-2012-02-06-001.patch \"Uploaded as text/plain at 2012-02-06.19:07:39 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[fix-broken-tests-on-3.1-dmalcolm-2012-02-06-001.patch](https://bugs.python.org/file24437/fix-broken-tests-on-3.1-dmalcolm-2012-02-06-001.patch \"Uploaded as text/plain at 2012-02-06.19:07:40 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[add-randomization-to-2.6-dmalcolm-2012-02-11-001.patch](https://bugs.python.org/file24490/add-randomization-to-2.6-dmalcolm-2012-02-11-001.patch \"Uploaded as text/plain at 2012-02-11.23:06:14 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[add-randomization-to-3.1-dmalcolm-2012-02-11-001.patch](https://bugs.python.org/file24491/add-randomization-to-3.1-dmalcolm-2012-02-11-001.patch \"Uploaded as text/plain at 2012-02-11.23:06:22 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[add-randomization-to-2.6-dmalcolm-2012-02-13-001.patch](https://bugs.python.org/file24514/add-randomization-to-2.6-dmalcolm-2012-02-13-001.patch \"Uploaded as text/plain at 2012-02-13.20:37:04 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[add-randomization-to-3.1-dmalcolm-2012-02-13-001.patch](https://bugs.python.org/file24515/add-randomization-to-3.1-dmalcolm-2012-02-13-001.patch \"Uploaded as text/plain at 2012-02-13.20:37:08 by @davidmalcolm\")\u003c/li\u003e\u003cli\u003e[hash-patch-3.1-gb-03.patch](https://bugs.python.org/file24563/hash-patch-3.1-gb-03.patch \"Uploaded as text/plain at 2012-02-19.10:00:45 by @birkenfeld\")\u003c/li\u003e\n\n\u003csup\u003e*Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.*\u003c/sup\u003e\n\n\u003cdetails\u003e\u003csummary\u003eShow more details\u003c/summary\u003e\u003cp\u003e\n\nGitHub fields:\n```python\nassignee = None\nclosed_at = \u003cDate 2012-03-13.22:25:45.919\u003e\ncreated_at = \u003cDate 2012-01-03.19:36:49.855\u003e\nlabels = ['type-security', 'interpreter-core', 'release-blocker', '3.11']\ntitle = 'Hash collision security issue'\nupdated_at = \u003cDate 2021-11-08.16:57:10.080\u003e\nuser = 'https://github.com/warsaw'\n```\n\nbugs.python.org fields:\n```python\nactivity = \u003cDate 2021-11-08.16:57:10.080\u003e\nactor = 'vstinner'\nassignee = 'none'\nclosed = True\nclosed_date = \u003cDate 2012-03-13.22:25:45.919\u003e\ncloser = 'gregory.p.smith'\ncomponents = ['Interpreter Core']\ncreation = \u003cDate 2012-01-03.19:36:49.855\u003e\ncreator = 'barry'\ndependencies = ['13704']\nfiles = ['24151', '24169', '24223', '24259', '24286', '24288', '24289', '24295', '24299', '24300', '24304', '24320', '24324', '24343', '24353', '24365', '24366', '24370', '24371', '24375', '24385', '24391', '24392', '24393', '24394', '24434', '24435', '24436', '24437', '24490', '24491', '24514', '24515', '24563']\nhgrepos = []\nissue_num = 13703\nkeywords = ['patch']\nmessage_count = 328.0\nmessages = ['150522', '150525', '150526', '150529', '150531', '150532', '150533', '150534', '150541', '150543', '150558', '150559', '150560', '150562', '150563', '150565', '150568', '150569', '150570', '150577', '150589', '150592', '150601', '150609', '150613', '150616', '150619', '150620', '150621', '150622', '150625', '150634', '150635', '150636', '150637', '150638', '150639', '150641', '150642', '150643', '150644', '150645', '150646', '150647', '150648', '150649', '150650', '150651', '150652', '150655', '150656', '150659', '150662', '150665', '150668', '150694', '150699', '150702', '150706', '150707', '150708', '150712', '150713', '150718', '150719', '150724', '150725', '150726', '150727', '150738', '150748', '150756', '150766', '150768', '150769', '150771', '150795', '150829', '150832', '150835', '150836', '150840', '150847', '150856', '150857', '150859', '150865', '150866', '150934', '151012', '151017', '151031', '151033', '151047', '151048', '151061', '151062', '151063', '151064', '151065', '151069', '151070', '151071', '151073', '151074', '151078', '151092', '151120', '151121', '151122', '151157', '151158', '151159', '151167', '151353', '151401', '151402', '151419', '151422', '151448', '151449', '151468', '151472', '151474', '151484', '151519', '151528', '151560', '151561', '151565', '151566', '151567', '151574', '151582', '151583', '151584', '151585', '151586', '151589', '151590', '151596', '151604', '151617', '151620', '151625', '151626', '151628', '151629', '151632', '151633', '151647', '151662', '151664', '151677', '151679', '151680', '151681', '151682', '151684', '151685', '151689', '151691', '151699', '151700', '151701', '151703', '151707', '151714', '151731', '151734', '151735', '151737', '151739', '151744', '151745', '151747', '151748', '151753', '151754', '151756', '151758', '151794', '151796', '151798', '151812', '151813', '151814', '151815', '151825', '151826', '151847', '151850', '151867', '151869', '151870', '151939', '151941', '151942', '151944', '151956', '151959', '151960', '151961', '151965', '151966', '151967', '151970', '151973', '151977', '151984', '152030', '152033', '152037', '152039', '152040', '152041', '152043', '152046', '152051', '152057', '152060', '152066', '152070', '152104', '152112', '152117', '152118', '152125', '152146', '152149', '152183', '152186', '152199', '152200', '152203', '152204', '152270', '152271', '152275', '152276', '152299', '152300', '152309', '152311', '152315', '152335', '152344', '152352', '152362', '152364', '152422', '152452', '152453', '152723', '152730', '152731', '152732', '152734', '152740', '152747', '152753', '152754', '152755', '152758', '152760', '152763', '152764', '152767', '152768', '152769', '152777', '152780', '152781', '152784', '152787', '152789', '152797', '152811', '152855', '153055', '153074', '153081', '153082', '153140', '153141', '153143', '153144', '153297', '153301', '153369', '153395', '153682', '153683', '153690', '153695', '153750', '153753', '153798', '153802', '153817', '153833', '153848', '153849', '153850', '153852', '153853', '153854', '153860', '153861', '153862', '153868', '153872', '153873', '153877', '153975', '153980', '154428', '154430', '154432', '154853', '155293', '155472', '155527', '155680', '155681', '155682', '405727', '405745']\nnosy_count = 36.0\nnosy_names = ['lemburg', 'gvanrossum', 'tim.peters', 'loewis', 'barry', 'georg.brandl', 'terry.reedy', 'gregory.p.smith', 'jcea', 'mark.dickinson', 'pitrou', 'christian.heimes', 'benjamin.peterson', 'roger.serwy', 'eric.araujo', 'grahamd', 'Arfrever', 'v+python', 'alex', 'cvrebert', 'zbysz', 'skrah', 'dmalcolm', 'gz', 'neologix', 'Arach', 'Mark.Shannon', 'python-dev', 'eric.snow', 'Zhiping.Deng', 'Huzaifa.Sidhpurwala', 'Jim.Jewett', 'PaulMcMillan', 'fx5', 'skorgu', 'jsvaughan']\npr_nums = []\npriority = 'release blocker'\nresolution = 'fixed'\nstage = 'needs patch'\nstatus = 'closed'\nsuperseder = None\ntype = 'security'\nurl = 'https://bugs.python.org/issue13703'\nversions = ['Python 3.11']\n```\n\n\u003c/p\u003e\u003c/details\u003e\n","author":{"url":"https://github.com/warsaw","@type":"Person","name":"warsaw"},"datePublished":"2012-01-03T19:36:50.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":328},"url":"https://github.com/57912/cpython/issues/57912"}