141 reputation
1
bio website
location
age
visits member for 7 months
seen Mar 16 at 5:14
stats profile views 1

I am graduate of Computer Sciences and have knowledge in Linux, Security, and Software Development.


Nov
22
comment Reset password - should I prevent abusing it?
To answer as follows: 1) The email is to keep you from having collisions mostly. If you using properly seeded UUIDs you shouldn't have an issue. 2) Statistically, no.
Nov
21
comment What's the secure way to change UNIX permissions on a harcoded file often?
If an attacker needs root in order to do the attack in #1, then you have other things to worry about. If the attacker gets root assume all hope is lost on that system, because at that point they could install a rootkit or anything else...stop the daemon...etc. You best protection here is to just use SELinux and write a proper policy for what you want to do with context transitions.
Nov
21
answered Reset password - should I prevent abusing it?
Oct
24
awarded  Teacher
Oct
24
answered Need help on understanding obfuscated code in CVE-2012-4969 exploit