Reusable MD5 collisions on .pickle files
[LINK]
My project from the AI Security Bootcamp, which won 2nd prize. TLDR: if you give me any two .pickle files, I can make their MD5 hashes collide. I also explain why this doesn’t work for .safetensors. One of the nerdiest and most enjoyable projects I’ve ever done, and definitely the most low-level. Not sure about its practical usefulness, though, as nobody uses MD5 anymore (and nobody should be using .pickle files!).