lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20171216202645.GM2191@eros>
Date:   Sun, 17 Dec 2017 07:26:45 +1100
From:   "Tobin C. Harding" <me@...in.cc>
To:     Alexey Dobriyan <adobriyan@...il.com>
Cc:     sergey.senozhatsky.work@...il.com, linux-kernel@...r.kernel.org,
        torvalds@...ux-foundation.org
Subject: Re: [PATCH V11 4/5] vsprintf: add printk specifier %px

On Wed, Dec 06, 2017 at 07:19:24AM +0300, Alexey Dobriyan wrote:
> > more %p grepping [filtering out all `%ps %pf %pb' variants] gives
> > a huge number of print outs that potentially can be broken now
> 
> Because people who introduce this stupid %p hashing can't be bothered
> to actually audit users:

lol, by 'stupid' he meant you Linus

	Tobin

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ