News for hackers. Stuff that matters.

A comment on Windows 10 Cannot Protect Insecure Applications Like EMET Can. Parent comment

Re:Windows 10 Cannot Protect Insecure Applications Like EMET... by rincebrain on Tuesday November 22, 2016 @08:09AM (#13013829)
Yeah, but as your comment says, for me, a lot of the value was in adding mitigations for applications that were not pre-compiled with said options.

Yes, some of them can be manually twiddled without recompilation, but it's not nearly as convenient to manage or deploy (though one imagines a GPO template to do all of the heavy lifting that's doable via IFEO would be a feasible thing), and for anyone not using GPOs, then you're reimplementing a poor subset of the EMET GUI over the IFEO parameters.

[ Parent | on HN ]
Re:Windows 10 Cannot Protect Insecure Applications Like EMET... by ryuuchin on Wednesday November 23, 2016 @03:33PM (#13025627)
> poor subset of the EMET GUI over the IFEO parameters.

Is it really though? I guess it depends how much value you place on the EAF and ROP protections. Personally I wouldn't place too much weight on them.

[ Parent | on HN ]