Why use the world writeable temp folder for updating a privileged service? It can be done securely- but so many things can go wrong. If bounties wasnt so low I would 100% look into it.pic.twitter.com/ogulE0GIgt
-
They often change the DACL on creation tho, not always
yarh- if predictable name then it can be possible to junction folder it to the uefi partition running fat32- where dack di not exist
-
-
They often randomize it with a guid, a shame you can can't get callback in usermoee because I see that they apply the DACL after the creation in some cases. So it's a race condition you cant win
-
Nah :) Just use projected filesystem ;) You get callback with name before file create
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.