4 ms·
Sounds cool until you think that you have to maintain this after new things are installed, removed and upgraded. ASLR is around for a reason, having everything
by dietr1ch 3y ago
Sounds cool until you think that you have to maintain this after new things are installed, removed and upgraded.
ASLR is around for a reason, having everything statically fixed may bring security concerns.
And, how do you run multiple programs out of the same binary?
- dzdt 3y agoRunning multiple instances: launch+fork with copy-on-write semantics? Re: ASLR, yeah I think you would lose most of that mitigation. Would it be worth it to make launching even the biggest programs instantaneous? The usability upside could be something amazing; maybe some other security mitigations could take the place of ASLR.
- dietr1ch 3y agoSecurity mitigations given everything you can run has a fixed address sounds cool, but wouldn't the copy-on-write semantics kind of break that? I guess you might still be able to do something though.