5 ms·
If I read this correctly, this is absolutely bonkers. Basically the "System libraries" do not exist as files anymore? So they just deprecated normal dynamic lin
by choeger 6y ago
If I read this correctly, this is absolutely bonkers. Basically the "System libraries" do not exist as files anymore? So they just deprecated normal dynamic linking for a subset of libraries? But as I know the Mac folks around there, they are going to swallow it. Because, uhm,..., It's Apple.
- chrisseaton 6y ago> this is absolutely bonkers Why do you care if the files are on the disk or not though? What are you using that for?
- choeger 6y agoFor linking.
- nojito 6y agoEssentially breaks many fingerprinting strategies. This is a very good change.
- loeg 6y agoCan you elaborate on what fingerprinting attack is broken by this model?
- quotemstr 6y agoBecause now, you can only probe for the existence of a specific shared library. You can't just enumerate all the libraries that happen to be available. That said, this change appears to apply only to system libraries --- how much fingerprinting entropy is contained in the system library list that isn't already contained in the OS version information?
- plorkyeran 6y agoZero, because the set of system libraries is fixed and doesn't vary between machines.
- rurban 6y agoFixed for this specific version. Probing tools are there to abstract different versions and changing API's. Now you got a probing tool with executive side effects, before it was pure read-only. Not everyone will be happy with this idea to execute first, look later. dynamic libs execute init functions at dlopen(). Check the various ld security implications.