grsecurity

@halvarflake randomization is not the way today. Stop the attack at the origin (prevent the first non authorized return)

New test patch up with improved protection against irrelevant infosec anklebiters

#news Grsecurity is choosing 4.4 as its next stable kernel tree and will continue to support 3.14 through the end of 2017

New patches uploaded for 3.14.67 and 4.4.8

@halvarflake @esizkur attackers are always like: "I really hope this vector is Turing complete!". Worst formalization possible.

Sent a mail out with some good/exciting news to existing customers, let me know if you didn't receive it

I think I should include a back to basics on effective security design and critical thinking in my keynote

But do keep wasting time on KASLR and tweaks to it, it'll only ensure grsec will remain that much further ahead of everyone else :)

It hasn't and won't stop exploits, but everyone else is doing it, so we should do it too. There you have it folks!https://twitter.com/jduck/status/721365735268700160 …

New patches up for 3.14.66 and 4.4.7

http://permalink.gmane.org/gmane.linux.kernel.hardened.devel/2181 … "Research was published showing" that KASLR is useless too, where's the fix for that?

Probably at least 100 or so patches floating around on LKML now related to KASLR on various archs, what a complete waste of effort

Honored to be invited to keynote SSTIC 2016!https://twitter.com/sstic/status/720244592940097536 …

Maybe that's the problem with bad security ideas -- people see they're not being done and think there's some gap to fill by doing them

How else can you explain both the inclusion of KASLR as well as all of the obvious bypasses?

Pretty sure all available evidence points to upstream not looking at the small details and also completely missing the big picture

https://lkml.org/lkml/2016/4/6/576 … Linus: "[security people] look at the small details, and are completely missing the big picture"

Call for Papers @h2hconference 13th Edition! #H2HC2016 https://www.h2hc.com.br  - Oldest hacking conference in LATAM.

People always forget in this Jurassic age of client-sides that web hacking + Linux locals still rule the world.

talking about how PaX ASLR entropy counts are no better than vanilla, coming from a kernel config with PaX completely disabled! (2/2)