Page 1 of 1

A bug of DC 1.4.7

Posted: Sat Jan 22, 2011 8:07 am
by kk

Posted: Sat Jan 22, 2011 12:07 pm
by DV
Not a bug, it's an MD5 hash collision, and a limitation of using MD5 comparison. Very rare in the wild (the files you link to are specific examples of MD5 collision)

That said, Duplicate Cleaner 2.0 can use SHA-1 or Byte comparison which should avoid such rare cases!

Posted: Tue Feb 22, 2011 1:49 am
by kk
It is strange that DC 1.4.7 succeeds to distinguish the two files below, whose MD5 values are the same too.

http://www.win.tue.nl/hashclash/SoftInt ... liding.exe

http://www.win.tue.nl/hashclash/SoftInt ... liding.exe


It is not safe to use DC 1.4.7, as MD5 collision is very rare, but it exist! Files with same MD5, should be checked byte by byte. It is a pain to use DC 2.0 which needs .Net Framework. Would DC 1.4.7 be updated?

Posted: Tue Feb 22, 2011 9:17 pm
by CC
What's the problem with using .Net Framework? Lot's of programs use it. Also, it's best to use SHA-1 with ANY duplicate finder.