News for hackers. Stuff that matters.

A comment on Attacker with access to XML config can trigger keepass.exe to obtain passwords. Parent comment

Re:Attacker with access to XML config can trigger keepass.ex... by sporksmith on Friday January 27, 2023 @08:46AM (#34545914)
> if you're allowed to look inside the process, which would be for similar reasons to why you're allowed to look inside a configuration file belonging to the user

On recent Linux distros, by default you can't ptrace (or read memory via /proc/x/mem etc) of non-child processes https://www.kernel.org/doc/html/latest/admin-guide/LSM/Yama....

[ Parent | on HN ]

There are no comments on this comment yet.