News for hackers. Stuff that matters.

A comment on Stop Trying to Fix the User (2016).

Re:Stop Trying to Fix the User (2016) by digi_owl on Wednesday October 18, 2017 @04:34AM (#15497692)
I wonder how much boils down to having data and code share the same IO channel. In the end, all of security boils down to tricking the OS and the CPU into treating what was first presented as data as code.
[ Parent | on HN ]
Re:Stop Trying to Fix the User (2016) by gizmo686 on Wednesday October 18, 2017 @04:52AM (#15497738)
Not all exploits are based on treating "data" as code. For instance, in USB autorun attacks, it is the intended behavior of the victim system to run the payload as code.
[ Parent | on HN ]
Re:Stop Trying to Fix the User (2016) by averagewall on Wednesday October 18, 2017 @06:37AM (#15498058)
Not common trojans that just pretend to be a harmless program. How could you possibly separate data and code anyway? Javascript not being on web pages? No PDFs allowed in the data channel?
[ Parent | on HN ]
Re:Stop Trying to Fix the User (2016) by digi_owl on Wednesday October 18, 2017 @08:49AM (#15498680)
https://en.wikipedia.org/wiki/Harvard_architecture

https://en.wikipedia.org/wiki/Modified_Harvard_architecture

[ Parent | on HN ]