Live
Breaking
1h ago Hardware & Chips Nvidia Reportedly Buys Hugging Face for $12.9B [2026] 3h ago Cybersecurity Boston Scientific Hack Cuts Q3 Revenue Up to 7% [2026] 6h ago Hardware & Chips HBM4 Memory Hits 80% Yield, Powers Nvidia Rubin [2026] 6h ago Hardware & Chips HPE Stock Hits 52-Week High of $58.79 on Nvidia CPU [2026] 7h ago Cloud Computing FinOps Shifts to AI: 98% Track Spend, 73% Blow Budget [2026] 9h ago Esports Bulk-Uninstall Valorant & Vanguard: 12 Steps, 45 Min [2026] 9h ago Casino Crypto Payment Links vs Wallet Addresses [2026] 11h ago Hardware & Chips Jalapeño Chip: OpenAI Targets Nvidia’s 75% Margin [2026] 11h ago Cryptocurrency Crypto Wallet Alerts: Track Any Address in 12 Steps [2026] 12h ago Casino Online Casino Winnings Taxes USA: The Complete Rules (2026) 12h ago Casino Venmo Casino Deposits: Why It’s Riskier Than It Looks 12h ago Casino Buffalo Gold Slot Strategy: RTP, Bonus & Bankroll Guide 12h ago Casino What Is RTP in Slots? Return to Player Explained 12h ago Casino How Long Do Casino Withdrawals Take? Real Timeframes by Method 1h ago Hardware & Chips Nvidia Reportedly Buys Hugging Face for $12.9B [2026] 3h ago Cybersecurity Boston Scientific Hack Cuts Q3 Revenue Up to 7% [2026] 6h ago Hardware & Chips HBM4 Memory Hits 80% Yield, Powers Nvidia Rubin [2026] 6h ago Hardware & Chips HPE Stock Hits 52-Week High of $58.79 on Nvidia CPU [2026] 7h ago Cloud Computing FinOps Shifts to AI: 98% Track Spend, 73% Blow Budget [2026] 9h ago Esports Bulk-Uninstall Valorant & Vanguard: 12 Steps, 45 Min [2026] 9h ago Casino Crypto Payment Links vs Wallet Addresses [2026] 11h ago Hardware & Chips Jalapeño Chip: OpenAI Targets Nvidia’s 75% Margin [2026] 11h ago Cryptocurrency Crypto Wallet Alerts: Track Any Address in 12 Steps [2026] 12h ago Casino Online Casino Winnings Taxes USA: The Complete Rules (2026) 12h ago Casino Venmo Casino Deposits: Why It’s Riskier Than It Looks 12h ago Casino Buffalo Gold Slot Strategy: RTP, Bonus & Bankroll Guide 12h ago Casino What Is RTP in Slots? Return to Player Explained 12h ago Casino How Long Do Casino Withdrawals Take? Real Timeframes by Method
NewsroomLive
Today19 new
Archive367 stories
Last filed1h ago
Languages10
UTC03:32:56
Top Story Hardware & Chips

Nvidia Reportedly Buys Hugging Face for $12.9B [2026]

Nvidia has reportedly agreed to buy Hugging Face, the open-source AI model repository used by more than 13 million developers, for $12.9 billion. The news broke late on August 27, 2026, when The Information cited a…

1h ago  ·  Aug 28, 2026 Read the brief

The Desks

// editorial departments

Latest

// fresh from the editors
Casino 9h ago

Crypto Payment Links vs Wallet Addresses [2026]

A wallet address identifies where cryptocurrency should go. A payment link can carry that address, together with an amount, currency, reference, and...

Aug 27, 2026 Read →

More from the desks

// keep digging
// about

About Shattered.io

This domain has been home to the SHAttered SHA-1 collision project since 2017, and is now a hub for cryptography, security and privacy reporting. The full origin story of the project, the two proof PDFs and the research credits live below.

The SHAttered project — origin, proof files and research credits

On 23 February 2017, researchers at CWI Amsterdam and Google showed the world the first real collision for the SHA-1 hash function. The project was called SHAttered, and this domain has been its home ever since. The two files that prove the break are still here to download.

What a collision actually is

A cryptographic hash takes any file and returns a short fixed-length fingerprint. The promise is simple: change a single bit of the file and the fingerprint changes too, and no two different files should ever share one. A collision breaks that promise. It is a pair of distinct inputs that produce the exact same hash. For a function used to sign software, certificates and documents, a collision is not a curiosity. It is a crack in the foundation.

What SHAttered produced

The team did not just argue that SHA-1 was weak on paper. They built the evidence. Two PDF files, visibly different and carrying different content, share one identical SHA-1 value: 38762cf7f55934b34d179ae6a4c80cadccbb7f0a. Run either file through SHA-1 and the answer matches. Run them through SHA-256 and the answer differs, which is how anyone can confirm they are genuinely two separate files.

What the attack cost

The break was expensive, and that was part of the point. Producing the collision took roughly nine quintillion SHA-1 computations, the work of about 6,500 CPU-years and 110 GPU-years run in parallel. That scale kept the attack out of reach for a casual attacker in 2017, yet it ran thousands of times faster than trying every possibility by brute force. The direction of travel was clear: the cost would only fall.

Why SHA-1 had to retire

Once a working collision exists, trust in a hash erodes quickly. Within months the result pushed browsers, certificate authorities and version-control systems to drop SHA-1 for anything security-sensitive. Git added collision detection. TLS certificates signed with SHA-1 were phased out. The lesson reached far past one algorithm: a function can look safe for years and still fall the moment the maths and the hardware line up.

The research and the people behind it

SHAttered was the work of Marc Stevens and Pierre Karpman at CWI Amsterdam, together with Elie Bursztein, Ange Albertini and Yarik Markov at Google. It built on years of earlier cryptanalysis of the SHA-1 design. The full technical paper that documents the method is preserved here.

Beyond the collision

The same questions that drove SHAttered run through everything we cover here: how hashing works, where it is used, and how systems prove they have not cheated. These guides pick up where the research leaves off.

What you'll find on shattered.io today