4 ms·
If you publish your findings somewhere, I'd love to read what you have found! We are also building a FOSS application firewall for Linux and I would like to see
by dhaavi 6y ago
If you publish your findings somewhere, I'd love to read what you have found!
We are also building a FOSS application firewall for Linux and I would like to see what problems you have found and how we are doing in that regard.
Ref: https://safing.io/portmaster/ https://safing.io/portmaster/
- netsec_burn 6y agoHey there. I did a second 10 minute code review on Portmaster. First I want to say, well done on your modular source tree. It made it very easy for me to go through your open source project. Second, Portmaster is more vulnerable than EBPFSnitch. There's a firewall bypass like EBPFSnitch and a possible auth bypass in the API. I need to verify if the auth bypass is exploitable. A blog post sounds interesting but I'd need to coordinate disclosure with you so your end users aren't affected. I'll circle back in an email thread, expect it in ~1mo.
- dhaavi 6y agoWow, thank you for looking into it! I am very much looking forward to your email.