3 ms·
So you think most people found the post interesting because of the thing that they're actually going to talk about next time rather than the actual content? I
by wheels 17y ago
So you think most people found the post interesting because of the thing that they're actually going to talk about next time rather than the actual content?
I believe that it's been widely read because of the novelty of avoiding crashes when dereferencing null pointers; in fact, for anyone who could have jumped to the conclusions about how the exploit would work, they could have reduced it to one line: "You can map address 0x0 with mmap and then segfaults on deferencing null don't happen." All of the rest of the article is only useful to people who don't know systems programming.
At any rate, I'm not sure that our fundamental disagreement is that wide; clearly the article is laying down a building block for a later piece on the security exploit and it was written to serve that purpose. This seems to be your point. My point is the actual content can stand alone and, in fact does, and is not about security.
- scott_s 17y agoThat is my point, and because of that, I find your blog post disingenuous. You ignored the stated purpose of their post and presented it as something it was not.
- Locke1689 17y agoSo you think most people found the post interesting because of the thing that they're actually going to talk about next time rather than the actual content? Actually, yes. I posted a comment on the previous article saying so. The information in the current article is rather trite. The intricacies of kernel privilege escalation is a different story.