4 ms·
I doubt any set of countermeasures will guarantee catching everything. I think the goal should be to make it harder and riskier for attackers to successfully pe
by dwheeler 3y ago
I doubt any set of countermeasures will guarantee catching everything. I think the goal should be to make it harder and riskier for attackers to successfully perform the attack. I can't be certain we can get there... but nothing gets better if we don't try to make it better.
- jancsika 3y agoI'm just talking about that scrumptious little contest winner. For example, not wanting to fudge around with allocation while iterating is palpable to anyone who can read C. That contest winner probably squeaks by. But perhaps on the flip side, any memory allocation that takes place while looping over bytes gets flagged for further review? I don't have the numbers but it seems like a lot of security bugs in C have lived there. Maybe the compiler blocks until you email it your pair programmer and they ACK back... :)