OP, i think he's saying about 2 string conflits... because md5 get few character... so, it's bigger the probably that two string can have the same MD5hash
for exemple:
d131dd02c5e6eec4693d9a0698aff95c 2fcab58712467eab4004583eb8fb7f89
55ad340609f4b30283e488832571415a 085125e8f7cdc99fd91dbdf280373c5b
d8823e3156348f5bae6dacd436c919c6 dd53e2b487da03fd02396306d248cda0
e99f33420f577ee8ce54b67080a80d1e c69821bcb6a8839396f9652b6ff72a70
d131dd02c5e6eec4693d9a0698aff95c 2fcab50712467eab4004583eb8fb7f89
55ad340609f4b30283e4888325f1415a 085125e8f7cdc99fd91dbd7280373c5b
d8823e3156348f5bae6dacd436c919c6 dd53e23487da03fd02396306d248cda0
e99f33420f577ee8ce54b67080280d1e c69821bcb6a8839396f965ab6ff72a70
Both are diferent (look at red text): but have the same MD5 Hash..., if you have 150string... there'are 2^150 possibilities = 45 houses
79054025255fb1a26e4bc422aef54eb4 = 16^32 = 38house
so... we'll have arround 7 house of conflits at least (10.000.000 combination string)... if you can find some of this 10.000.000 you can steal users because you can show more than 1 string and manipulate the results, got it?
for exemple:
d131dd02c5e6eec4693d9a0698aff95c 2fcab58712467eab4004583eb8fb7f89
55ad340609f4b30283e488832571415a 085125e8f7cdc99fd91dbdf280373c5b
d8823e3156348f5bae6dacd436c919c6 dd53e2b487da03fd02396306d248cda0
e99f33420f577ee8ce54b67080a80d1e c69821bcb6a8839396f9652b6ff72a70
d131dd02c5e6eec4693d9a0698aff95c 2fcab50712467eab4004583eb8fb7f89
55ad340609f4b30283e4888325f1415a 085125e8f7cdc99fd91dbd7280373c5b
d8823e3156348f5bae6dacd436c919c6 dd53e23487da03fd02396306d248cda0
e99f33420f577ee8ce54b67080280d1e c69821bcb6a8839396f965ab6ff72a70
Both are diferent (look at red text): but have the same MD5 Hash..., if you have 150string... there'are 2^150 possibilities = 45 houses
79054025255fb1a26e4bc422aef54eb4 = 16^32 = 38house
so... we'll have arround 7 house of conflits at least (10.000.000 combination string)... if you can find some of this 10.000.000 you can steal users because you can show more than 1 string and manipulate the results, got it?
What are you talking about?... it is working only for strings with alphabet+numeric, but here used only numeric string!
After each bet the system will generate new unique string with result (example: 1001101100111100101... len=150 symbols) and will show to user MD5 HASH SUM this string.
If you will change control string (1001101100111100101... len=150 symbols) in the process, then MD5 HASH SUM will also be changed!
In any case, change the output string to hash SHA256 is not a problem.
