Re:Make Ubuntu packages 90% faster by rebuilding them
by pdpi on Tuesday March 18, 2025 @11:30PM
(#43408039)
The defining characteristic of security through obscurity is that the effectiveness of the security measure depends on the attacker not knowing about the measure at all. That description doesn’t apply to ASLR.
[ Parent
| on HN ]
Re:Make Ubuntu packages 90% faster by rebuilding them
by ryao on Wednesday March 19, 2025 @01:46PM
(#43415140)
It produces a randomization either at compile time or run time, and the randomization is the security measure, which is obscured based on the idea that nobody can figure it out with ease. It is a poor security measure given the AnC attack that I mentioned. ASLR randomization is effectively this when such attacks are applicable:
https://web.archive.org/web/20240123122515if_/https://www.sy...
