Re:The DrK Attack: De-randomizing Kernel ASLR
by CalChris on Wednesday October 26, 2016 @04:22PM
(#12800106)
So yet another KASLR bypass.
Is KASLR broken or is TSX broken? Seems to me that TSX is broken, yet again. For example, substituting Rowhammer for TSX and L4 for Linux, you could then say that L4 is broken because of Rowhammer when what's really broken is DRAM.
Is KASLR broken or is TSX broken? Seems to me that TSX is broken, yet again. For example, substituting Rowhammer for TSX and L4 for Linux, you could then say that L4 is broken because of Rowhammer when what's really broken is DRAM.
http://techreport.com/news/26911/errata-prompts-intel-to-dis...
With sufficient code bloat, all bugs are deep.
You might call it bloat, but I'd classify ASLR as Defense in Depth.