12 ms·
Yo, the attacker has access to the same binaries, so only runtime address randomization is useful.
by goodpoint 2y ago
Yo, the attacker has access to the same binaries, so only runtime address randomization is useful.
- nyrikki 1y agoThe problem is that a common method is to seed the linkers symbol generation with a relative file name. This reduces entropy across binaries and may enable reliable detection of bas addresses or to differentiate gadgets in text regions. It is all tradeoffs. But think about how a known phrase is how enigma was cracked.