chrisrohlf

11 ms·

1. 31.▲
   by chrisrohlf 13y ago

   There have been remote code execution vulnerabilities in OpenSSL in the past, yet no one panicked. Those vulnerabilities gave you what heartbleed does and more. The worst part about heartbleed is that its easy to exploit and the tools to do
2. 32.▲
   by chrisrohlf 13y ago

   Yes, it was.
3. 33.▲
   by chrisrohlf 13y ago

   Agree with most of this except for "and many specialized allocators have their own security mitigation build in." This is generally not true in my experience [1] when it comes to unlink checks, guard pages and the like. Often a ge
4. 34.▲
   by chrisrohlf 13y ago

   gets is not missing from the list. As for alloca() please see http://blog.exodusintel.com/2013/01/07/who-was-phone/ as an example of how things can go very wrong. memcpy() isn't bad in itself but it
5. 35.▲
   by chrisrohlf 13y ago

   Hi. I wrote this post and I agree with you about this particular annoyance (and apparently so do a lot of other people). Blogger themes are limited and while I can customize it I think a better solution is to move to another blogging platfo