Top all-time · #17638
About
Personal blog · vulnfactory.org/blogsecuritysystems
About is a personal blog at vulnfactory.org about security and systems. Since 2011, 4 different Hacker News readers have linked it 4 times. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Commenters cite the blog's posts on x86 kernel protections such as SMEP and SMAP, which relate to Linux kernel memory safety. The one comment cites a post as a source for its own point.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
What Hacker News says?
> separated kernel and process address space This already exists on x86_64 Linux in the form of SMEP and SMAP. > With SMEP enabled, it’s no longer possible to map exploit payloads in userland, as the CPU will trigger a fault if it attempts to execute those user pages in kernel mode http://vulnfactory.org/blog/2011/06/05/smep-what-is-it-and-h... > SMEP can be used to prevent supervisor-mode code from unintentionally…
Comment linking /blog/2011/06/05/smep-what-is-it-and-how-to-beat-it-on-linux/
on “Towards Linux Kernel Memory Safety”Submitted Carrier IQ: The Real Story as a story · 23 points
HN discussionSubmitted Universal Motorola Root Exploit : Reverse Bounty Experiment : Failed as a story · 2 points
HN discussionSubmitted Defeating Windows 8 ROP Mitigation as a story · 2 points
HN discussion