News for hackers. Stuff that matters.
Re:Vue Native (2018) by pjmlp on Wednesday January 27, 2021 @12:16PM (#25930807)
Safer with less memory corruption exploits to start with.

Fixing C is so beyond hope that Apple, Oracle, Google, Microsoft, ARM are all driving hardware based solutions for memory tagging and pointer validation, while at the same time reducing the use cases for it across their OS stacks.

Re:Vue Native (2018) by agumonkey on Wednesday January 27, 2021 @12:18PM (#25930846)
> Safer with less memory corruption exploits to start with.

ok I admit defeat on this. I can't barely believe I forgot that u_u;

Re:Vue Native (2018) by pjmlp on Wednesday January 27, 2021 @01:47PM (#25932150)
Here some updates on hardware memory tagging from Google regarding future Android hardware.

https://youtu.be/zkoOD4hmiGE

Microsoft, FreeBSD, ARM collaboration on CHERI

https://msrc-blog.microsoft.com/2020/10/14/security-analysis...

https://youtu.be/yrk5FfjHDCo

Oracle with ADI

https://docs.oracle.com/cd/E37838_01/html/E61059/gqajs.html

Apple with pointer authentication,

https://developer.apple.com/documentation/security/preparing...