News for hackers. Stuff that matters.
Re:Remote iPhone exploitation part 2: a remote ASLR bypass by roddux on Friday January 10, 2020 @04:18AM (#22009586)
>ignoring the security best practices of other systems programming languages

Can you please expand on this point?

Re:Remote iPhone exploitation part 2: a remote ASLR bypass by pjmlp on Friday January 10, 2020 @04:37AM (#22009706)
Bounds checking, explicit unsafe blocks, proper strings, explicit type conversions, proper enumerations, checked arithmetic.

For example, ESPOL/NEWP was the first systems programming language with explicit unsafe blocks, 8 years before C came into the world.

So hardware that was much weaker than PDP-11, and yet capable of supporting such security features.

Burroughs B5000 OS is still being developed, nowadays known as Unisys ClearPath MCP, and its top selling feature is being a mainframe system for customers whose security is the top priority.

Re:Remote iPhone exploitation part 2: a remote ASLR bypass by saagarjha on Friday January 10, 2020 @07:16AM (#22010429)
> Burroughs B5000 OS is still being developed, nowadays known as Unisys ClearPath MCP, and its top selling feature is being a mainframe system for customers whose security is the top priority.

What's special about it?

Re:Remote iPhone exploitation part 2: a remote ASLR bypass by pjmlp on Friday January 10, 2020 @08:48AM (#22010862)
Implemented in a systems programming language has everything security related that C lacks.

> Bounds checking, explicit unsafe blocks, proper strings, explicit type conversions, proper enumerations, checked arithmetic.

Plus a capabilities based security access, and unsafe blocks taint binaries, requiring admin permission to be executed.

Re:Remote iPhone exploitation part 2: a remote ASLR bypass by saagarjha on Saturday January 11, 2020 @05:25AM (#22019207)
Are these OS or hardware features?
Re:Remote iPhone exploitation part 2: a remote ASLR bypass by pjmlp on Saturday January 11, 2020 @06:41AM (#22019388)
Language and OS features.

Recent hardware versions use Xeons.

Again, just features missing from C, and available in other languages.

Another notable feature, it did not make use of any Assembly, in 1961, because all CPU features are exposed as compiler intrinsics.