Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
3
Impact
~1k people reached

  • 0 posts edited
  • 0 helpful flags
  • 7 votes cast
Dec
13
awarded  Autobiographer
Dec
5
awarded  Supporter
Nov
22
comment Reset password - should I prevent abusing it?
To answer as follows: 1) The email is to keep you from having collisions mostly. If you using properly seeded UUIDs you shouldn't have an issue. 2) Statistically, no.
Nov
21
comment What's the secure way to change UNIX permissions on a harcoded file often?
If an attacker needs root in order to do the attack in #1, then you have other things to worry about. If the attacker gets root assume all hope is lost on that system, because at that point they could install a rootkit or anything else...stop the daemon...etc. You best protection here is to just use SELinux and write a proper policy for what you want to do with context transitions.
Nov
21
answered Reset password - should I prevent abusing it?
Oct
24
awarded  Teacher
Oct
24
answered Need help on understanding obfuscated code in CVE-2012-4969 exploit