6 ms·
Uh, citation, please? You liked to an article that says "there once existed a vulnerability in Safari" and then right away claimed that Linux and OSX are "stil
by andreyf 16y ago
Uh, citation, please?
You liked to an article that says "there once existed a vulnerability in Safari" and then right away claimed that Linux and OSX are "still catching up to" Windows in terms of security. Now, I want to believe you, but it sounds to me like you're speaking with a little too much conviction relative to the evidence you're presenting.
- sp332 16y agoI'm not sure of the overall security level of Linux & Windows, but Linux ASLR is weak: http://jbrownsec.blogspot.com/2009/07/beating-linux-aslr.html http://jbrownsec.blogspot.com/2009/07/beating-linux-aslr.htm...
- ori_b 16y agoOne citation, describing flaws in the current implementations. http://web.archive.org/web/20080111062141/http://www.matasano.com/log/986/what-weve-since-learned-about-leopard-security-features/ http://web.archive.org/web/20080111062141/http://www.matasan... Another (fairly poorly written) article about it: http://www.tomshardware.com/news/hack-windows-security-snow-leopard,8704.html http://www.tomshardware.com/news/hack-windows-security-snow-... I'm sure you can find more if you dig around. Also, non-executable stack has been supported OSX since it was shipped, but non-executable heap is new. I believe (I'm not sure) that non-executable stack is also disabled fairly often because of trampolines in GCC. Security in OSX isn't broken, of course, but the mitigation measures are strongest in Windows, out of the mainstream OSes these days.