3 ms·
Hmm. To guard against an attacker with only user privileges, couldn't you simply mark the file as accessible only by root? ;-) That said, I'd say if you have u
by lstamour 13y ago
Hmm. To guard against an attacker with only user privileges, couldn't you simply mark the file as accessible only by root? ;-)
That said, I'd say if you have user privileges in my router, I've bigger issues than wifi passwords and config files...
- Perdition 13y agoMany of the home router vendors have released firmware with stupid flaws like allowing the inbuilt webserver (running as root) to traverse up directories and thus allow the attacker to view config files. If the passwords were stored properly hashed then the attacker has to do a lot more work to recover the plain text.