News for hackers. Stuff that matters.

A comment on Linus Torvalds: “Do No Harm”. Parent comment

Re:Linus Torvalds: “Do No Harm” by Slavius on Wednesday November 22, 2017 @06:56AM (#15756109)
Corrupting SP is part of almost every exploit and I can guarantee you that it is very likely (going to cause harm on your system). Try to pull Metasploit GIT repo to get some idea about thousands of payloads that do corrupt SP without crashing the host...
[ Parent | on HN ]
Re:Linus Torvalds: “Do No Harm” by jhasse on Wednesday November 22, 2017 @08:55AM (#15756755)
Yes, but how many of all cases of corrupted stack pointers are exploits?
[ Parent | on HN ]
Re:Linus Torvalds: “Do No Harm” by jessaustin on Wednesday November 22, 2017 @09:21AM (#15756936)
Why would that matter? We're not trying to be secure against random cosmic rays. We're trying to be secure against attackers.

http://wondermark.com/406/

[ Parent | on HN ]
Re:Linus Torvalds: “Do No Harm” by jhasse on Thursday November 23, 2017 @04:25AM (#15763919)
It matters because we're talking about letting the browser crash on all cases.

> We're trying to be secure against attackers.

We also want a browser that doesn't crash.

[ Parent | on HN ]