{"product_id":"flame-shirt-md5-collision-malware-graphic-tee-unhacked","title":"EXHIBIT 0014 — FLAME","description":"\u003cp\u003eTo sign itself as Microsoft, it needed a hash collision nobody had published yet. So they built one.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eFlame was found in May 2012, around twenty megabytes of modular espionage platform aimed largely at the Middle East. It logged keystrokes, took screenshots, recorded audio through the microphone, and inventoried nearby Bluetooth devices.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eNone of that is why it matters.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eFlame spread across local networks by presenting itself as Windows Update, and Windows will not accept an update that is not signed by Microsoft. Flame had a valid Microsoft signature.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eIt got one through Terminal Server Licensing certificates, which were still being issued with MD5, and an MD5 chosen-prefix collision — two different inputs forced to produce one identical hash, so a signature over a harmless document is also a valid signature over a malicious one.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe specific collision variant used had not appeared in the academic literature. Cryptographers who examined it concluded the authors had done original work, in private, and spent it on a certificate.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eMicrosoft revoked the certificates and pushed the fix in June 2012.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eSomewhere there is a team that solved an unpublished problem in cryptanalysis and used it to look like a software update.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eEXHIBIT 0014 \/ FLAME \/ 2012\u003c\/p\u003e","brand":"Printify","offers":[{"title":"Charcoal \/ S","offer_id":54505746366748,"sku":"19082592160068937130","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ S","offer_id":54505746399516,"sku":"28022236555613506950","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ S","offer_id":54505746432284,"sku":"87909024078398223993","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ S","offer_id":54505746465052,"sku":"33052379904647775203","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ S","offer_id":54505746497820,"sku":"29923958193462290152","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ M","offer_id":54505746530588,"sku":"27507321237451970545","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ M","offer_id":54505746563356,"sku":"27507853387547147925","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ M","offer_id":54505746596124,"sku":"32656408366702908780","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ M","offer_id":54505746628892,"sku":"10845679187034266419","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ M","offer_id":54505746661660,"sku":"15375024772046655823","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ L","offer_id":54505746694428,"sku":"34801986105757753049","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ L","offer_id":54505746727196,"sku":"10969401972315868427","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ L","offer_id":54505746759964,"sku":"21600740530627932975","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ L","offer_id":54505746792732,"sku":"20978953118756526079","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ L","offer_id":54505746825500,"sku":"12532131428169297219","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ XL","offer_id":54505746858268,"sku":"48350081077302074013","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ XL","offer_id":54505746891036,"sku":"64220718437107736228","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ XL","offer_id":54505746923804,"sku":"31386807401917144268","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ XL","offer_id":54505746956572,"sku":"23181877039346284314","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ XL","offer_id":54505746989340,"sku":"18559228252206861698","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 2XL","offer_id":54505747022108,"sku":"53026304486536064039","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 2XL","offer_id":54505747054876,"sku":"26100528958758782468","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 2XL","offer_id":54505747087644,"sku":"18333242284425652482","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 2XL","offer_id":54505747120412,"sku":"20679074364926756239","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 2XL","offer_id":54505747153180,"sku":"85386381292557751148","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 3XL","offer_id":54505747185948,"sku":"26907616305905842537","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 3XL","offer_id":54505747218716,"sku":"20847197936923901168","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 3XL","offer_id":54505747251484,"sku":"20916237432860995957","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 3XL","offer_id":54505747284252,"sku":"13248661847748861784","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 3XL","offer_id":54505747317020,"sku":"44267010140912721106","price":24.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0961\/8184\/6300\/files\/15350590891754808922_2048.jpg?v=1788373199","url":"https:\/\/unhacked.shop\/products\/flame-shirt-md5-collision-malware-graphic-tee-unhacked","provider":"Unhacked","version":"1.0","type":"link"}