News for hackers. Stuff that matters.

A comment on RIP ROP: CET Internals in Windows 20H1. Parent comment

Re:RIP ROP: CET Internals in Windows 20H1 by codys on Tuesday July 21, 2020 @06:20PM (#23911609)
Can you provide some details on your binary rewriter to add shadow stack support? Was this a pure software approach, or was it designed to take advantage of the support in new intel microprocessors? Do you have a write up of or can you give a quick overview of your methodology? Is the source code published somewhere?
[ Parent | on HN ]
Re:RIP ROP: CET Internals in Windows 20H1 by jnwatson on Tuesday July 21, 2020 @08:59PM (#23912797)
No, it was proprietary code, and it wasn't for an Intel processor. It was a pure software approach, but the particular (embedded) environment made it harder to attack the shadow stack itself.

I had a pretty cool optimization that I don't think anyone's figured out yet. Oh well. That's the downside of software-as-trade-secrets.

[ Parent | on HN ]
Re:RIP ROP: CET Internals in Windows 20H1 by saagarjha on Tuesday July 21, 2020 @11:23PM (#23913612)
Can you name it, so we can find it ourselves? ;)
[ Parent | on HN ]