How to Compromise the Enterprise Endpoint

Re:How to Compromise the Enterprise Endpoint by yuhong on Tuesday June 28, 2016 @10:06PM (#11999045)

Win32k before Win10 used to do TrueType/Type 1 parsing in the kernel, with an entire bytecode virtual machine!

[ Parent | on HN ]

Re:How to Compromise the Enterprise Endpoint by fdsaaf on Tuesday June 28, 2016 @11:32PM (#11999314)

So what? Linux, today, has a full bytecode interpreter

[ Parent | on HN ]

Re:How to Compromise the Enterprise Endpoint by internals on Tuesday June 28, 2016 @11:46PM (#11999353)

Bigger attack surface in the kernel, for something that doesn't need to be there, and that is historically very difficult to code securely.

[ Parent | on HN ]

Re:How to Compromise the Enterprise Endpoint by ryuuchin on Wednesday June 29, 2016 @01:20AM (#11999650)

grsecurity just disables it outright IIRC (the new one that was added sort of recently, probably year+ at this point).

[ Parent | on HN ]