Ilya Lipnitskiy
Ilya Lipnitskiy
Add wikiconvert_creole.py created by @tfmorris and fix a few parsing issues in wikiconvert.py
From: https://defuse.ca/audits/encfs.htm Exploitability: **Low** Security Impact: **Medium** EncFS uses 64-bit MACs. This is not long enough, as they can be forged in 2^64 time, which is feasible today. EncFS should...
From: https://defuse.ca/audits/encfs.htm Exploitability: **Low** Security Impact: **Medium** Given the File IV (an IV unique to a file), EncFS generates per-block IVs by XORing the File IV with the Block Number,...
From: https://defuse.ca/audits/encfs.htm Exploitability: **Unknown** Security Impact: **High** As reported in [[1](http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0316.html)], EncFS uses a stream cipher mode to encrypt the last file block. The change log says that the ability...
From: https://defuse.ca/audits/encfs.htm Initialization vectors are only 64 bits, even when using AES instead of Blowfish. This may lead to vulnerabilities when encrypting large (or lots of) files.
From: https://defuse.ca/audits/encfs.htm EncFS uses Mac-then-Encrypt. Therefore it is possible for any processing done on the decrypted plaintext before the MAC is checked to leak information about it, in a style...
From: https://defuse.ca/audits/encfs.htm Exploitability: **Low** Security Impact: **Low** EncFS uses the same key for encrypting data and computing MACs. This is generally considered to be bad practice. EncFS should use separate...
From: https://defuse.ca/audits/encfs.htm Exploitability: **High** Security Impact: **Low** File holes allow large files to contain "holes" of all zero bytes, which are not saved to disk. EncFS supports these, but it...
See [this blog post](https://e.printstacktrace.blog/spock-assertion-inside-if-statement-doesnt-work-why/) for a thorough analysis of the issue. Given test case: ```groovy def "should fail on expected == result comparison"() { given: def expected = "Hello, John!"...
travis-ci.org has the following notice: > Please be aware travis-ci.org will be shutting down in several weeks, with all accounts migrating to travis-ci.com. Please stay tuned here for more information....