3 ms·
Because now, you can only probe for the existence of a specific shared library. You can't just enumerate all the libraries that happen to be available. That sai
by quotemstr 6y ago
Because now, you can only probe for the existence of a specific shared library. You can't just enumerate all the libraries that happen to be available. That said, this change appears to apply only to system libraries --- how much fingerprinting entropy is contained in the system library list that isn't already contained in the OS version information?
- plorkyeran 6y agoZero, because the set of system libraries is fixed and doesn't vary between machines.
- rurban 6y agoFixed for this specific version. Probing tools are there to abstract different versions and changing API's. Now you got a probing tool with executive side effects, before it was pure read-only. Not everyone will be happy with this idea to execute first, look later. dynamic libs execute init functions at dlopen(). Check the various ld security implications.