3 ms·
Does someone know why weren't stack overflow exploits more common in the early 90s? If the Morris worm used them in 88, how did the technique get lost until th
by rel2thr 6y ago
Does someone know why weren't stack overflow exploits more common in the early 90s?
If the Morris worm used them in 88, how did the technique get lost until this phrack article come out?
Makes me wonder if there are still entire classes of exploits that are undiscovered out there.
- tptacek 6y agoThis is a big question in vulnerability research! A previous thread: https://news.ycombinator.com/item?id=6656303 https://news.ycombinator.com/item?id=6656303 Since then, I've talked to some people I trust who say they were exploiting overflows prior to 1995 (by like a year or so), so it was in the air before then, but I haven't seen much evidence that anything like a full-fledged stack overflow had been exploited in the 5 years between '88 and '95. (Also: Neil Woods tweeted the 8lgm syslog shellcode, which was pretty rad: https://twitter.com/tqbf/status/1332579786682724354 https://twitter.com/tqbf/status/1332579786682724354).