3 ms·
Nobody claimed he invented the buffer overflow. The claim is that he was one of the first researchers to investigate them. That claim is justified.
by stonogo 4y ago
Nobody claimed he invented the buffer overflow. The claim is that he was one of the first researchers to investigate them. That claim is justified.
- tptacek 4y agoLiterally every "researcher" in 1995 was working on this problem. I was in the room with Mudge at Pumpcon while he was doing the research work for this, with like a dozen other people. All of them were I believe primarily motivated by 8lgm --- that's why Mudge's post uses a contrived syslog(3) example instead of a real bug, because the 8lgm Sendmail exploit was an overflow in syslog(3). It's fine, it's a solid post, it's an early post. But Lopatic and 8lgm set this in motion, and the actual blueprint for this attack was probably splitvt.
- bink 4y agoHaving also been at Pumpcon 95 I'm a little surprised that any work got done there at all.