Re: [Monotone-devel] hang on Win32/MinGW with sync file:

[Nathaniel Smith]

On Tue, Dec 04, 2007 at 01:48:57PM +1300, Matthew Gregan wrote:
> I don't think so.  The listener is bound to localhost and expects exactly
> one connection.  The port number is ephemeral.  The other end of the socket
> is set up immediately.  Worst case, an attacker can guess the ephemeral port
> number and connect to it, but it will just cause socketpair() to return an
> error because its own attempt to connect to the listening socket will fail.

Oh yeah, that works too...

-- Nathaniel

-- 
"If you can explain how you do something, then you're very very bad at it."
  -- John Hopfield