[Info-vax] Malware in kernel mode
Paul Sture
nospam at sture.ch
Sat Sep 27 05:22:09 EDT 2014
On 2014-09-26, Stephen Hoffman <seaohveh at hoffmanlabs.invalid> wrote:
> On 2014-09-26 19:53:40 +0000, Simon Clubley said:
>
>> Yes, I've heard of the NX bit. :-)
>>
>> However, can I ask if you have heard of Return-Oriented Programming ?
>
> "The no-execute memory management option on the stack is really just a
> joke promulgated by some marketeers."
><http://labs.hoffmanlabs.com/node/1014>
Executive summary: Microsoft adopted it. What besides marketing did you
expect?
Your idea of variable sized memory pages appeals (cf the small, normal
and large I/O request packets (IRPs) used by VMS)
P.S. I looked shibboleth up because I wasn't entirely sure what it means:
noun
a custom, principle, or belief distinguishing a particular class or group
of people, especially a long-standing one regarded as outmoded or no
longer important
--
A quick recap of Thursday 25th September 2014:
http://pbs.twimg.com/media/ByZfyyXIQAAXTai.jpg
Happy Thursday!
More information about the Info-vax
mailing list