[Bug 766] minor optimization: check local path and file names before password prompt

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Dec 2 04:33:13 EST 2003


http://bugzilla.mindrot.org/show_bug.cgi?id=766





------- Additional Comments From mark at summersault.com  2003-12-01 10:33 -------
I don't understand how this is information leakage. For local files, I
can already check if a file exists or not, as well as I can if Irun 'scp' to do
it.

For uses where scp requires a password, that will of course need to be
given before any files are checked as another user, so no information
should be leaked there, either.

In any case, it's minor optimization. I thought I'd suggest it.
 
I use ssh and scp and everyday and find them extremely useful.

Thanks for your work on the project!

  Mark



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list