3 ms·
If you can provable show that the bug is non-exploitable, then can’t the attacker?
by chris_wot 8y ago
If you can provable show that the bug is non-exploitable, then can’t the attacker?
- moyix 8y agoThis is why the bugs are made non-exploitable by construction rather than by doing a bunch of work to show they're non-exploitable. There's an information asymmetry at work: the injector can craft all bugs in such a way as to ensure their non-exploitability, but the attacker has to laboriously prove the non-exploitability of each one.