5 ms·
That's like saying you don't like crash barriers on the side of a highway because it doesn't address the real problem of cars crashing. Yes, ASLR doesn't addre
by advisedwang 7y ago
That's like saying you don't like crash barriers on the side of a highway because it doesn't address the real problem of cars crashing.
Yes, ASLR doesn't address the root bugs. Yes, ASLR can be bypassed. But it still lowers the overall risk and so is worth having around.
- Animats 7y agoNo, it's not. Crash barriers are a defense against random events. Attackers are non-random and purposeful. Several defensive layers, all with holes, only protect against inept attackers.
- satya71 7y agoI suspect the number of inept attackers is rather high.
- BoorishBears 7y agoYou're making their point. You're saying it protects against "inept" attackers, that lowers risk. No need to nitpick a simple analogy.
- DaniloDias 7y agoHis comment is a textbook example of the kind of nihilistic antagonism so common in the security industry.
- Skunkleton 7y agoThere can be only one response to these people. Stop using computers. Computers are hugely complex, and no amount of software level shenanigans can amount to anything other than a crash barrier.
- yjftsjthsd-h 7y ago> nihilistic antagonism so common in the security industry Thank you, that is a very nice label for an annoying phenomenon.
- pertymcpert 7y agoGreat. So it does actually help.