4 ms·

Nearly every exploit is a "pretty amateur mistake" in hindsight.

• adamnemecek 13y ago
  Not really, no.
  • sillysaurus2 13y ago
    Would you give some examples of some exploits which you feel weren't exploiting amateur mistakes?
    • meowface 13y ago
      http://www.exploit-db.com/exploits/28974/ http://www.exploit-db.com/exploits/28974/ Here's one. A use-after-free triggered due to some faulty logic. Mistake? Yes. Amateur mistake? No. Even very experienced C/C++ programmers, such as Microsoft's top devs, may accidentally double-free, or use already-free memory.
      • HairyFotr 13y ago
        Don't static analyzers catch a lot of these bugs these days? (if one can be bothered to configure and use them)
        • wglb 13y ago
          And wade through a forest of false positives.
        • meowface 13y ago
          They do. And I imagine Microsoft employs static analyzers very frequently. They can't always catch everything, though.