![]() |
|
Windows 10 ASLR Flaw - Printable Version +- AlienBabelTech Forums (http://alienbabeltech.com/forum) +-- Forum: Technology (http://alienbabeltech.com/forum/forumdisplay.php?fid=6) +--- Forum: Software & Programming (http://alienbabeltech.com/forum/forumdisplay.php?fid=11) +--- Thread: Windows 10 ASLR Flaw (/showthread.php?tid=1770) |
Windows 10 ASLR Flaw - SteelCrysis - 11-21-2017 https://www.extremetech.com/computing/259350-key-windows-10-antimalware-technology-critically-broken This is embarrassing. Quote:Over a decade ago, Microsoft added support for a key malware mitigation technique that makes it harder for rogue applications to predict which code will be loaded into specific target addresses. This technique, called address space layout randomization (ASLR), stores data in different locations each and every time the application is run. If your code is riddled with security flaws, ASLR won’t secure it, but it will (hopefully) make it a little harder to find and therefore exploit. Or at least, that’s how it’s supposed to work — but Windows 10, it turns out, has a teensy little problem. It stores its supposedly randomized data in exactly the same place, each and every time. |