3 ms·
In contrast, Go programs are not compiled with ASLR/PIE by default. Go's developers do not want to give up the debuggability of deterministic address space layo
by cpeterso 8y ago
In contrast, Go programs are not compiled with ASLR/PIE by default. Go's developers do not want to give up the debuggability of deterministic address space layout, comparing ASLR's extra protection to "seat belts in restaurants" because Go fixes these vulnerabilities at the language level.
https://rain-1.github.io/golang-aslr.html https://rain-1.github.io/golang-aslr.html
https://insanitybit.github.io/2016/12/28/golang-and-rustlang-memory-safety https://insanitybit.github.io/2016/12/28/golang-and-rustlang...
- jimktrains2 8y agoDefense in depth. Check rust should also not have these types of problems, but that doesn't mean that C libraries and other unchecked behavior won't. This is probably why Go does support ASLR.