3 ms·
The speaker claims that the cookie/key can be known by causing VM crash, which is done by exploiting the monotonic nature of cookie values which are stored as a
by dhab 7y ago
The speaker claims that the cookie/key can be known by causing VM crash, which is done by exploiting the monotonic nature of cookie values which are stored as atoms which has a fixed cap on how many they can be, which when exceeded causes VM to crash. He estimates the time to do that be 10 mins (I forgot the exact memory limit)
- bdibs 7y agoThat’s definitely an issue, but again can be easily mitigated with a simple firewall that doesn’t allow every port to be open to the world.