News for hackers. Stuff that matters.

A comment on What We Do in the /etc./Shadow – Cryptography with Passwords. Parent comment

Re:What We Do in the /etc./Shadow – Cryptography with Passwords by rtev on Saturday January 07, 2023 @03:49AM (#34286355)
That WAF needs to be tuned. If they’re worried about the possibility of a local file read that can disclose /etc/shadow, there are much bigger issues.
[ Parent | on HN ]
Re:What We Do in the /etc./Shadow – Cryptography with Passwords by thayne on Saturday January 07, 2023 @02:29PM (#34291677)
Or it is defense in depth. Although blocking it even if the / is percent encoded seems a bit excessive, especially as a default.
[ Parent | on HN ]