full-disclosure - Attacks based on predictable process IDs??

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.44.0311281152130.9297-100000@isec.pl>
From: cliph at isec.pl (Wojciech Purczynski)
Subject: Attacks based on predictable process IDs??

> current linux kernels provide more than 15bit pids ( I think its 30 or 
> 31bits). Not much more, but it makes it slightly more difficult. 

Your "current" linux doesn't seem to be stable yet ;) I haven't seen pids
wider than 15 bits on any production system :)

Cheers,
wp

-- 
Wojciech Purczynski
iSEC Security Research
http://isec.pl/