News for hackers. Stuff that matters.

A comment on RIP ROP: CET Internals in Windows 20H1. Parent comment

Re:RIP ROP: CET Internals in Windows 20H1 by saagarjha on Wednesday July 22, 2020 @01:55AM (#23914314)
How so? As far as I understand, being able to leak an ASLR slide from JavaScript is considered to be a security bug in every browser engine, because they do not intentionally provide access to that information.
[ Parent | on HN ]
Re:RIP ROP: CET Internals in Windows 20H1 by staticassertion on Wednesday July 22, 2020 @08:52AM (#23916367)
Whether the browser intends to provide that information or not, ASLR was not designed as a control against an attacker who can run near arbitrary code in the process.
[ Parent | on HN ]