Merlin: A cross-platform command and control server and agent written in Go

Re:Merlin: A cross-platform command and control server and a... by pjmlp on Tuesday January 01, 2019 @05:30PM (#18802817)

Tell that to Google, which presented a report at Linux Kernel Summit 2018, where 68% from Linux kernel CVEs are caused by C's memory corruption features, and has been pushing for the Kernel Self Preservation Project on Linux.

The videos are freely available.

As for hating C's lack of safety features, it goes back to the earlier 80's from Algol/Pascal/Modula-2/Ada side.

So no, it isn't something new, just now the always on Internet and IoT adoption are making it relatively easier to prove our point.

[ Parent | on HN ]

Re:Merlin: A cross-platform command and control server and a... by SEJeff on Wednesday January 02, 2019 @10:36AM (#18806799)

I think KSP is Kernel Self Protection and Kees Cook has been pushing it since he was the kernel security guy @ Canonical many years ago:

https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Pr...

[ Parent | on HN ]

Re:Merlin: A cross-platform command and control server and a... by pjmlp on Wednesday January 02, 2019 @11:39AM (#18807450)

Yeah I get it wrong all the time, thanks for the correction.

I only became aware of his work since Google.

[ Parent | on HN ]

Re:Merlin: A cross-platform command and control server and a... by SEJeff on Thursday January 03, 2019 @10:32AM (#18815802)

All good! He was at Canonical for awhile actually, but did a lot on proactive security and I’ve followed him since. The “SE” in my username is a hat tip to SELinux, as I’ve always been a fan of the Flask Security Architecture.

https://wiki.ubuntu.com/KeesCook

[ Parent | on HN ]