Hacker News Reader

Comment by kris-nova | Hacker News Reader

I would be willing to wager there is more inside that PDF than just the contents of the Bitcoin white paper. Curious if anyone has a hash sum handy

View on HN

  $ wget https://bitcoin.org/bitcoin.pdf
  [...]
  $ openssl sha256 bitcoin.pdf 
  SHA256(bitcoin.pdf)= b1674191a88ec5cdd733e4240a81803105dc412d6c6708d53ab94fc248f4f553
  $ openssl sha256 /System/Library/Image\ Capture/Devices/VirtualScanner.app/Contents/Resources/simpledoc.pdf
  SHA256(/System/Library/Image Capture/Devices/VirtualScanner.app/Contents/Resources/simpledoc.pdf)= b1674191a88ec5cdd733e4240a81803105dc412d6c6708d53ab94fc248f4f553

(Ventura 13.3)

and a universal hash collision attack!? this is amazing stuff from apple

They'd also need great compression to put more inside the pdf.

  md5: d56d71ecadf2137be09d8b1d35c6c042
  sha1: 8de2fdb04edce612738eb51e14ecc426381f8ed8
  sha256: b1674191a88ec5cdd733e4240a81803105dc412d6c6708d53ab94fc248f4f553
  size: 184292 bytes

These are from MacOS 10.15.7 The file matches the officially released whitepaper pdf.

Mojave:

    openssl sha256 /System/Library/Image\ Capture/Devices/VirtualScanner.app/Contents/Resources/simpledoc.pdf
    SHA256(/System/Library/Image Capture/Devices/VirtualScanner.app/Contents/Resources/simpledoc.pdf)= b1674191a88ec5cdd733e4240a81803105dc412d6c6708d53ab94fc248f4f553

/System/Library/Image Capture/Devices/VirtualScanner.app/Contents/Resources/simpledoc.pdf

sha256: b1674191a88ec5cdd733e4240a81803105dc412d6c6708d53ab94fc248f4f553

sha512: 2ac531ee521cf93f8419c2018f770fbb42c65396178e079a416e7038d3f9ab9fc2c35c4d838bc8b5dd68f4c13759fe9cdf90a46528412fefe1294cb26beabf4e

crc32 (lol): 13af7d06

md5: d56d71ecadf2137be09d8b1d35c6c042

sha1: 8de2fdb04edce612738eb51e14ecc426381f8ed8

Both the sha256 and sha512 exactly match a copy of the whitepaper from 2017, so that would be a pretty sophisticated attack.

The entire directory is really weird. Looks like some sort of directory of assets for automated testing the data from scanners (like, physical document scanners) returning properly? Built in macOS md5 hash reports the PDF's hash as d56d71ecadf2137be09d8b1d35c6c042

Reply on news.ycombinator.com