rejetto forum

Improving security

0 Members and 1 Guest are viewing this topic.

Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13308
    • View Profile
Hello guys, i want to say THANKS to Daniele Linguaglossa aka xpl01t for the HUGE work he is doing on checking every security aspect of the software and communicating with me to get rid of the flaws.
He already found some major problems and many other risks. We are taking care of everything within my limited resources of time.
I owe him several beers.


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13308
    • View Profile
and we are not done yet, expect at least another security update


Offline xpl01t

  • Occasional poster
  • *
    • Posts: 16
    • View Profile
I'm pleased to work with you regarding fixing these security flaws and help hfs project to become a better tool, definitely risks-free  ;D


Offline LeoNeeson

  • Tireless poster
  • ****
    • Posts: 729
  • Status: On hiatus (sporadically here)
    • View Profile
    • twitter.com/LeoNeeson
As I've said in another post, I must say thank you, to both of you: Rejetto and Daniele Linguaglossa, for making this release. I'm very happy that Daniele finally did help Rejetto to fix this security issue. :)


PS: I owe an apology to you, Daniele. Because at first I thought that you were a 14-years-old hacker kid, who was bragging about it. I was wrong, and I give you my apology. Greetings! :D
HFS in Spanish (HFS en Español) / How to compile HFS (Tutorial)
» Currently taking a break, until HFS v2.4 get his stable version.


Offline bmartino1

  • Tireless poster
  • ****
    • Posts: 901
  • I'm only trying to help i mean no offense.
    • View Profile
    • My HFS Google Drive Shared Link
i to want to show my appreciation to both the creator of hfs (Rejetto) and Daniele... aswell...

If i have offend you i apologize. keep up the good work and i look forward to seeing the new HFS releases.
....

I think 2.3 is still in beta??? so hfs 2.4? lolz :)
still wonder if the rarw live templates will still be available and / or the random rarw/temple macros found in the form don't kill the work ie admin .tpl...

I appreciate your work on this,
Bmartino1
Files i try to keep and share can be found on my google drive:

https://drive.google.com/drive/folders/1FOWi3Gqaldld6JLXvZ-biDv4RSguf0IC


Offline raybob

  • Tireless poster
  • ****
    • Posts: 453
    • View Profile
    • FileSplat.com
On a scale from 1 to 10 how applicable are these security concerns to FHFS then if they were on the client side?

Rejetto, maybe you can email me info on the hacks and I'll see if they need to be fixed in FHFS.

Maybe Daniele would be willing to review the security of FHFS even? :D

~ Ray


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13308
    • View Profile
you'd better make a diff between 2.3a and 2.3c, and see whatever applies to your project.
The flaws are critical.


DSGJ

  • Guest
Thank You Again rejetto for releasing the security updates, I use HFS as a personal and limited access to a few friends as a web based cloud server so keeping things secure is really important. :)
So
Thank You, Thank You, Thank You Again! :D