4 ms·

> It hasn’t been a meaningful attack deterrent because attackers keep finding PAC bypasses. Correction: it forces attackers to find PAC bypasses. They are not

> It hasn’t been a meaningful attack deterrent because attackers keep finding PAC bypasses. Correction: it forces attackers to find PAC bypasses. They are not infinite.

strcat 1y ago
Hijacking control flow like this is not a hard requirement of exploitation. Vulnerabilities in a specific software release are not infinite in general so that doesn't mean much.
- saagarjha 1y ago
  Memory safety issues, or ROP gadgets, and the like are basically infinite