[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <jnc745riho5bck4f24gfjhz755zedqma77hbpdcwn7hchttluu@n6ajzobn5ukx>
Date: Wed, 24 Jan 2024 09:39:38 -0800
From: nightmare.yeah27@...ecat.org
To: oss-security@...ts.openwall.com
Subject: Re: darkhttpd: timing attack and local leak of HTTP basic auth
credentials
Do not the various implementations of the *ident* protocol (example: oidentd)
rely on this interface? They are often, or always, intentionally configured
to run as nobody or a dedicated UID.
--
Ian
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
