Re: JSON HASHDOS

> On 23 Dec 2014, at 20:12, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote: > > Hi, > > On Wed, Dec 24, 2014 at 4:51 AM, Pierre Joye <pierre.php@gmail.com> wrote: > >> This issue has been reported earlier on security@php.net and is being >> discussed and analyzed. It is not a simple task. >> > > If we are not going to use other hash (i.e. half MD4 like other langs), how > about > add max allowed collisions? It would be simple and fast enough. I'm not > looking > at the code, so I could be wrong. Hey, We could implement a special JSONObject class with custom __get/__set handlers and that’s Traversable, which implements a randomised hashing algorithm rather than using zend_hash. That could be overkill though. Thanks. -- Andrea Faulds http://ajf.me/