3 ms·

So, I'm kind of curious: It seems that the whole ROP thing depends on X86's CISC architecture in order to allow turing complete programming. Am I wrong in thi

• mjb 11y ago
  Yes. The techniques are possible (though have slightly different tactics) on other architectures. I'm aware of ROP being used for exploits on x86, ARM, MIPS and PPC.
• nickpsecurity 11y ago
  Oh, the attackers in academia have been clever for a long time. Check out this old gem: Automatic Patch-based Exploit Generation is Possible http://bitblaze.cs.berkeley.edu/papers/apeg.pdf http://bitblaze.cs.berkeley.edu/papers/apeg.pdf Gave me a sly grin when I saw it years ago. And to think I thought I was clever because I always tried to compromise networks via whatever they trusted for security. These jokers straight-up turned patches into weapons. I realized at that point, along with all the hacks in media, that computer security was fundamentally (censored). Started focusing on clean-slate approaches where possible with obfuscation, diversity, and strong interface protection everywhere else.