New answers tagged


his operation is performed entirely on a register and an immediate value, and is very fast, so it will probably happen before the interrupt catches us.


I would say that is a significant risk for several reasons, being: Even if employee numbers are not currently used as an ID method, they might be used in the future for this purpose. Some companies will use an employee number as a username as well, so if the attacker can find this and correlate it to a person's real given and surname then this would empower ...

Top 50 recent answers are included