[Info-vax] Malware in kernel mode

Paul Sture nospam at sture.ch
Sat Sep 27 05:22:09 EDT 2014


On 2014-09-26, Stephen Hoffman <seaohveh at hoffmanlabs.invalid> wrote:
> On 2014-09-26 19:53:40 +0000, Simon Clubley said:
>
>> Yes, I've heard of the NX bit. :-)
>> 
>> However, can I ask if you have heard of Return-Oriented Programming ?
>
> "The no-execute memory management option on the stack is really just a 
> joke promulgated by some marketeers."   

><http://labs.hoffmanlabs.com/node/1014>

Executive summary: Microsoft adopted it.  What besides marketing did you
                   expect?

Your idea of variable sized memory pages appeals (cf the small, normal
and large I/O request packets (IRPs) used by VMS)

P.S. I looked shibboleth up because I wasn't entirely sure what it means:

noun
a custom, principle, or belief distinguishing a particular class or group
of people, especially a long-standing one regarded as outmoded or no
longer important

-- 
A quick recap of Thursday 25th September 2014:
http://pbs.twimg.com/media/ByZfyyXIQAAXTai.jpg
Happy Thursday!



More information about the Info-vax mailing list