News for hackers. Stuff that matters.

A comment on Morpheus: A Vulnerability-Tolerant Secure Architecture [pdf]. Parent comment

Re:Morpheus: A Vulnerability-Tolerant Secure Architecture [pdf] by monocasa on Sunday October 06, 2019 @04:02PM (#21174696)
No, I'm saying you don't have to turn off these protections.

Like, can you give an example of a debugging task you have carried out that requires reading the code segment of the running process?

[ Parent | on HN ]
Re:Morpheus: A Vulnerability-Tolerant Secure Architecture [pdf] by hleach on Sunday October 06, 2019 @04:40PM (#21174968)
Required? No, but I didn't say impossible. I said "more difficult".

Made easier by? Most everything ever loaded in a debugger.

[ Parent | on HN ]
Re:Morpheus: A Vulnerability-Tolerant Secure Architecture [pdf] by hleach on Sunday October 06, 2019 @05:44PM (#21175388)
Just for an example. How about debugging a non trivial issue between a program and a dynamically loaded library.

You can't just scan the IAT/PLT. You are going to have to find load points or manually step through, and maybe calculate function offsets in the library. Not impossible at all.

It is however something you could have just quickly glanced at and found otherwise.

[ Parent | on HN ]