News for hackers. Stuff that matters.

A comment on RIP ROP: CET Internals in Windows 20H1. Parent comment

Re:RIP ROP: CET Internals in Windows 20H1 by pjmlp on Wednesday July 22, 2020 @03:15AM (#23914679)
Incredible how C and C++ have managed to keep the security industry busy.

Not that other languages don't have logical errors that might lead to security exploits, but in what concerns memory corruption exploits, the mitigation list just keeps pilling up.

Looking forward to how long ARM hardware memory tagging will hold on, after Intel's MPX failure.

At least so far Solaris SPARC ADI seems to hold on.

[ Parent | on HN ]
Re:RIP ROP: CET Internals in Windows 20H1 by saagarjha on Wednesday July 22, 2020 @04:12AM (#23914945)
MPX was totally slow and cumbersome, ARM tagging should be much nicer as will be CHERI when it actually comes out.
[ Parent | on HN ]
Re:RIP ROP: CET Internals in Windows 20H1 by pjmlp on Wednesday July 22, 2020 @04:25AM (#23915015)
Sure, it doesn't change the fact that Intel borked it and is yet to provide a better alternative.
[ Parent | on HN ]