Attacks based on predictable process IDs??

[Brett Hutley <brett () hutley net>]

Folks, does anyone know why predictable process IDs are considered harmful?

I can see that there could be the possibility of a compromise if your
cryptographic PRNGs are seeded using a process ID.

Does anyone know of any other types of attacks?

Cheers, Brett
--
Brett Hutley [MAppFin,CISSP,SANS GCIH]
mailto:brett () hutley net
http://hutley.net/brett



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html