Reading the hash doesn’t sound like much of a flaw to me, could you elaborate or provide a link?