News for hackers. Stuff that matters.

A comment on Linux-insides: Linux kernel load address randomization. Parent comment

Re:Linux-insides: Linux kernel load address randomization by monocasa on Sunday January 07, 2018 @04:47PM (#16092937)
Sure, but those same speculative execution attacks also trivially defeat ASLR. And practically speaking, memory safety in formally proved software tends to be pretty bullet proof.

So, outside of memory unsafety, is there another threat profile where ASLR gains you something?

[ Parent | on HN ]
Re:Linux-insides: Linux kernel load address randomization by gok on Sunday January 07, 2018 @05:51PM (#16093209)
Sure, consider that the hashCode() of objects in Java are based on memory addresses, which means they’re predictable to an attacker without ASLR.
[ Parent | on HN ]