News for hackers. Stuff that matters.
Re:Tell HN: C Experts Panel – Ask us anything about C by asveikau on Tuesday April 14, 2020 @08:03PM (#22872940)
Depends a lot on the specifics. For example heartbleed was a misread that led to the buffer being sent on the socket. And I think it was more than 32 bits. 32 bits of garbage into a log file that needs privileges to read sounds a tad less scary, but like I say, not out of the question to be harmful.
Re:Tell HN: C Experts Panel – Ask us anything about C by memling on Tuesday April 14, 2020 @08:54PM (#22873265)
> Depends a lot on the specifics. For example heartbleed was a misread that led to the buffer being sent on the socket. And I think it was more than 32 bits. 32 bits of garbage into a log file that needs privileges to read sounds a tad less scary, but like I say, not out of the question to be harmful.

If you can do it a lot of times, though, that changes matters.

Re:Tell HN: C Experts Panel – Ask us anything about C by saagarjha on Tuesday April 14, 2020 @09:46PM (#22873624)
32 bits is plenty to effectively break ASLR or significantly weaken a cryptographic key.