From: Wojciech K. <woj...@ko...> - 2003-01-25 07:28:35
|
Hello. I've been wondering about potential attacks on the host system using persist feature. The thing that looks like a small flaw is that directory name can be guessed (ie C:/Documents.../user/.../dir%d) - it looks like it's impossible to use it, but ... it'd still be better to protect it against guessing. For example using a 8bytes random characters directory name (this will give 2^48 possibilities to check when using base64 charset) will make it almost impossible to find the desired file. I'm a bit paranoid, but it doesn't hurt :) -- WK (written at Stardate 57060.9) "Data typing is an illusion. Everything is a sequence of bytes." -Todd Coram |