| |||||||||||||
Nonsense. This is trivial stuff.Nonsense. This is trivial stuff.Posted Jul 20, 2009 12:23 UTC (Mon) by spender (subscriber, #23067)In reply to: Nonsense. This is trivial stuff. by tialaramex Parent article: Linux 2.6.30 exploit posted
Your post is the perfect reason why I'm the security expert and you're not.
Your entire "suppose I find a way" argument is based off a non-existent bug. I was talking about the vulnerability I exploited. The only way you're going to turn that into a security problem for this firewall app you've invented is if you can get arbitrary code execution in the firewall app to force it to open a device it never wanted to open in the first place, and then perform an additional poll on the device that it never wanted to do in the first place. If you have arbitrary code execution within the firewall app, you might as well just call kill (or just fail with your arbitrary code execution and crash the process)!
Try again.
-Brad
(Log in to post comments)
|
|||||||||||||