3 ms·
>The answers you seek I expect you backing up your statement that ASLR is obsolete. So far all we have is a URL and advice to research ourselves. What stops y
by auslander 8y ago
>The answers you seek
I expect you backing up your statement that ASLR is obsolete. So far all we have is a URL and advice to research ourselves.
What stops you from giving a direct answer? Hint: "ASLR is useless, because I can, for example, do this: ..."
- kev009 8y agoMy dude, if you can't read and comprehend how am I supposed to do that for you? The article includes extensive linked references with code examples that are far more credible than me on the subject. What don't you understand here: "As ASLR has improved through 'full' ASLR, attackers have needed to read memory in their exploit code to adequately determine what data to target for a successful exploit. This step in exploit development is one of the most time consuming, but also the most powerful, because in many cases not only can you craft an exploit to read the target address space and bypass ASLR, you can also write into the target address space." If language is a barrier or something, that means, in simple words, ASLR is so minor a speedbump as to be a safety blanket.
- auslander 8y agoSo he can read all memory before exploiting, aha. I give up. You mentioned a language problem? Sure, I can rephrase all I said in simpler terms :)
- kev009 8y agoNo, that's not at all what TFA says lol. You'll fit right in with HBSD and OPN crew :)
- deleted 8y ago[deleted]
- dang 8y agoPlease don't react to flamebait by joining a flamewar. We're trying to avoid that here. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html