| |||||||||||||
Why am I seeing a security exploit?Why am I seeing a security exploit?Posted Apr 4, 2013 16:20 UTC (Thu) by jimparis (subscriber, #38647)In reply to: Why am I seeing a security exploit? by bronson Parent article: Widening ext4's readdir() cookie
The odds of two hashes colliding may be 1 in 10^18, but this grows with the number of files. With 60,000 files it's 1 in 10^10. Make up a use case where you're frequently creating or recreating directories with that many files, and it's not far fetched to expect someone to run into a collision pretty soon.
(numbers from http://preshing.com/20110504/hash-collision-probabilities)
(Log in to post comments)
|
|||||||||||||