10
7
solidsnail

@infosec.pub

solidsnail 10 points 3 years ago

I think they're lacking explanation of what the data means.

This can be very nuanced, and dependent on your goals.

For example, in the context of fingerprinting, sometimes it's better to provide fake data instead of no data, because that itself can be a unique characteristic.

path: 0 1537169, hotness: undefined, score: 10, children: 1
solidsnail 2 points 3 years ago

Also interested.

Will be keeping an eye on this thread.

path: 0 736044, hotness: undefined, score: 2, children: 0
solidsnail 1 point 3 years ago

Took them 5 years to fix a critical vulnerability.

Really shows their concern for security.

path: 0 524681 851330, hotness: undefined, score: 1, children: 0
solidsnail 1 point 3 years ago

Stopped you? Wdym?

path: 0 3372794 3374156, hotness: undefined, score: 1, children: 2
solidsnail 1 point 3 years ago

( ͡° ͜ʖ ͡°)

path: 0 3372794 3374156 3390856 3495787, hotness: undefined, score: 1, children: 0
solidsnail 1 point 3 years ago

That is very true.
I do think that there's more depth to it than that. For example, dealing with it on the end of the terminal will probably break compatibility, and dealing with it on the app end will require every single dev to start sanitizing this. The challenges are real.

path: 0 6070719 6079890, hotness: undefined, score: 1, children: 0
solidsnail 0 points 3 years ago

I feel like I'm a bit lacking when it comes to finding race condition vulnerabilities. Any tips on that?

path: 0 1211146, hotness: undefined, score: 0, children: 1

thanks for using Leebra!

go to feed...