Nils Thiele
2016-11-04 13:09:05 UTC
Hi,
i just noticed a huge problem with a change in my wpkg-gp modification
compared to the original release.
I change the mount function to map the drive to a letter because i had
problem with disconnecting the drive after wpkg is done on my
development system.
Now i noticed that this drive will show up for every user while wpkg-gp
is accessing it as "disconnected drive", despite its name every user on
the pc is able to access it while wpkg is running! This could be a huge
risk because depending on the rights the user used for connected the
drive, also users could read stored license keys.
I hope nobody is running this in production yet and and if those update
to the latest release immediatly where i have reverted my changes:
https://github.com/sonicnkt/wpkg-gp/releases/tag/v0.17.16
For some reason the problems i had before are gone as well and the drive
sucessfully disconnected on my development system, i guess it was caused
by something else.
Greetings,
Nils
--
IT-Support - Fachbereich 09 Kulturgeschichte und Kulturkunde
Universität Hamburg
Flügelbau West, R. 204
Edmund-Siemers-Allee 1
D-20146 Hamburg
Tel.: +49-40-42838-3024
Email: ***@uni-hamburg.de
---------------------------------
wpkg-users mailing list archives >> http://lists.wpkg.org/pipermail/wpkg-users/
i just noticed a huge problem with a change in my wpkg-gp modification
compared to the original release.
I change the mount function to map the drive to a letter because i had
problem with disconnecting the drive after wpkg is done on my
development system.
Now i noticed that this drive will show up for every user while wpkg-gp
is accessing it as "disconnected drive", despite its name every user on
the pc is able to access it while wpkg is running! This could be a huge
risk because depending on the rights the user used for connected the
drive, also users could read stored license keys.
I hope nobody is running this in production yet and and if those update
to the latest release immediatly where i have reverted my changes:
https://github.com/sonicnkt/wpkg-gp/releases/tag/v0.17.16
For some reason the problems i had before are gone as well and the drive
sucessfully disconnected on my development system, i guess it was caused
by something else.
Greetings,
Nils
--
IT-Support - Fachbereich 09 Kulturgeschichte und Kulturkunde
Universität Hamburg
Flügelbau West, R. 204
Edmund-Siemers-Allee 1
D-20146 Hamburg
Tel.: +49-40-42838-3024
Email: ***@uni-hamburg.de
---------------------------------
wpkg-users mailing list archives >> http://lists.wpkg.org/pipermail/wpkg-users/