Re:Chaff Bugs: Deterring Attackers by Making Software Buggier
by chris_wot on Saturday August 04, 2018 @08:02PM
(#17689004)
If you can provable show that the bug is non-exploitable, then can’t the attacker?
[ Parent
| on HN ]
Re:Chaff Bugs: Deterring Attackers by Making Software Buggier
by moyix on Sunday August 05, 2018 @01:12PM
(#17692290)
This is why the bugs are made non-exploitable by construction rather than by doing a bunch of work to show they're non-exploitable. There's an information asymmetry at work: the injector can craft all bugs in such a way as to ensure their non-exploitability, but the attacker has to laboriously prove the non-exploitability of each one.