position:security auditor

Potential Attack On #ethereum Network to Mint GasTokens
▻https://hackernoon.com/potential-attack-on-ethereum-network-to-mint-gastokens-5cf05a7e0303?sour

https://cdn-images-1.medium.com/max/780/1*MFEvSDYX-y2P6z3zCllNhA.jpeg

▻https://btcmanager.com/overview-of-recent-ethereum-attacks-impact-on-the-network/By Abhishek sharma Security Auditor at QuillAudits.Ethereum Network VulnerabilityThe latest vulnerability, in ethereum framework uncovered by levelk, Potentially allows bad actors to mint large amounts of Gastokens or drain funds.Discovered by whom ?In levelk’s hypothetical study or in a case study it is possible to mint large amount of GasTokens while receiving ETH or any ERC20, or other standard token.The vulnerability that comes in light when fallback function of a receiver contract is able to carry out capricious computations that the transaction producer pays for, which comes with a risk of ‘griefing’.What is a griefer ?A griefer or bad faith player is a player in a multiplayer video game who deliberately (...)

#blockchain #mint-gastokens #ethereum-attack #smart-contracts

Our security auditor is an idiot, how do I give him the information he wants? - Server Fault
►http://serverfault.com/questions/293217/our-security-auditor-is-an-idiot-how-do-i-give-him-the-information-he-w

A security auditor for our servers has demanded the following within two weeks:

– A list of current usernames and plain-text passwords for all user accounts on all servers
– A list of all password changes for the past six months, again in plain-text
– A list of “every file added to the server from remote devices” in the past six months
– The public and private keys of any SSH keys
– An email sent to him every time a user changes their password, containing the plain text password

We’re running Red Hat Linux 5/6 and CentOS 5 boxes with LDAP authentication.

As far as I’m aware, everything on that list is ether impossible or incredibly difficult to get, but if I don’t provide this information we lose access to our payments platform, and any income we might have got while we move away. Any suggestions for how I can solve or fake this information?

#sécurité_informatique #audit #serveur #discussion #témoignage