4 ms·
Indeed, I've had a ton of fun learning about system security by implementing various protection mechanisms and security mitigations (and doing some of my own ex
by akling 6y ago
Indeed, I've had a ton of fun learning about system security by implementing various protection mechanisms and security mitigations (and doing some of my own exploits, too!) I'm learning new stuff all the time, so I've been growing the system's defenses along with my own skills.
One small correction: the kernel does not yet have a slide, but everything else is accurate. Also, the blessed syscall pages is now down to a single page in in libsystem.so[1]
Furthermore, as of today[2] we also randomize the location of JavaScript heap memory, which makes the spray technique used in this exploit a lot less reliable as well :)
1. https://github.com/SerenityOS/serenity/commit/e87eac92730f1cc55d7a44f8bb6331b4a8e33535 https://github.com/SerenityOS/serenity/commit/e87eac92730f1c...
2. https://github.com/SerenityOS/serenity/commit/e8d3856736925311e35e0a6b9027b0e8f1deb92f https://github.com/SerenityOS/serenity/commit/e8d38567369253...
- breckinloggins 6y agoThanks Andreas. I've updated my comment to reflect those corrections.