News for hackers. Stuff that matters.

A comment on PAM Duress – Alternate passwords for panic situations. Parent comment

Re:PAM Duress – Alternate passwords for panic situations by wowaname on Monday August 23, 2021 @10:23AM (#28276200)
There are some issues with nuvious' pam-duress that allow for untrusted string inputs when handling scripts with system() call, and I sent a patch to them via E-mail in an attempt to highlight the issues and provide a basis for a better way to handle it.
[ Parent | on HN ]
Re:PAM Duress – Alternate passwords for panic situations by nuvious on Wednesday August 25, 2021 @05:19PM (#28307178)
Hey, just found that patch in my email. Will try to get that encoded into a formal issues on the project. If you have time yourself feel free to that or any other issue yourself. Also looking for 3rd party reviews on the PR's I have open now and into the future.
[ Parent | on HN ]
Re:PAM Duress – Alternate passwords for panic situations by wowaname on Wednesday August 25, 2021 @05:44PM (#28307489)
I don't use Github, but thanks for confirming you received it, and feel free to take time to get around to it.
[ Parent | on HN ]