popa3d-users - Re: virtual.c another question

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Sun, 30 Mar 2003 17:18:05 +0600
From: Boris Kovalenko <boris@...net.ru>
To:  popa3d-users@...ts.openwall.com
Subject: Re: virtual.c another question

Solar Designer wrote:

>On Sun, Mar 30, 2003 at 01:29:38PM +0600, Boris Kovalenko wrote:
>
>Hi,
>  
>
>>Why to run other code if we already know that user is invalid? Why lstat 
>>directory and try to open file for this "INVALID" user?
>>    
>>
>
>This is to reduce information leaks via timing.
>
What type of information? May be I need do the same within my module? 
Please be more concretic.

>
>  
>

Boris