3 ms·
Well, we know they're ML classifiers and they're not making syscalls. So there's obviously a limit to "we don't know what they do".
by astrange 3y ago
Well, we know they're ML classifiers and they're not making syscalls. So there's obviously a limit to "we don't know what they do".
- tptacek 3y agoYou'd still know what syscalls a cryptographically obfuscated userland program was making.
- sbierwagen 3y agoIf it's a total black box, wouldn't the NOBUS thing to do would be to have some large key that it's watching input for that flips it into a malicious mode? If BB(6) took years to execute, how long would you have to spend feeding random input to a suspected-hostile 10000 symbol Turing machine (whose source code and state you can't examine) in a sandbox before you decided it was safe?
- rini17 3y agoEasy, have all executable segments read-only with none (or fixed) syscall instructions.
- astrange 3y agoThink it'd be a bit dangerous to let them make any though, unless you were single stepping.