Welcome, Guest. Please login or register.

Author Topic: Security risks using data saves that include pointers ?  (Read 3243 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline Piru

  • \' union select name,pwd--
  • Hero Member
  • *****
  • Join Date: Aug 2002
  • Posts: 6946
    • Show all replies
    • http://www.iki.fi/sintonen/
Re: Security risks using data saves that include pointers ?
« on: January 30, 2007, 06:46:25 PM »
Well, assuming you're using a system with secure memory, it also has secure file access permissions.

Also, even if someone else would gain knowlege of the memory addresses used, those adresses are only valid inside the current incarnation of the said application itself (yes, each process has it's own address space). Even if you get the logical address to the memory, you don't get the physical one, so it's impossible to access it from the outside.

So just pointers themselves are pretty much always harmless.

The above on systems such as bsd, linux, windows etc. On Amiga the system is exposed, so I doubt if leaking any pointer does any more harm anyway. Obviously this doesn't mean you should write passwords plaintext, or not wipe out plaintext passwords after reading/decoding them into memory.
 

Offline Piru

  • \' union select name,pwd--
  • Hero Member
  • *****
  • Join Date: Aug 2002
  • Posts: 6946
    • Show all replies
    • http://www.iki.fi/sintonen/
Re: Security risks using data saves that include pointers ?
« Reply #1 on: January 30, 2007, 08:50:49 PM »
Quote
There is absolutely no reason to ever save a pointer on any normal system.

I think Jose is well aware of that. ;-)