So, the problem with USB tokens that we basically have two choices: - Unauditable black boxes built on *supposedly* more secure ICs that require NDAs to develop for - Open and auditable, but definitely pwnable off the shelf microcontrollers. Which poison do you prefer?
Or you could just code in Rust and never have to worry about buffer overflows. Sorry, I would never hire you. You don't know what you're talking about if that's your mindset. If you think coding in assembler means you write more secure code, I am certain your code is not secure.
-
-
You never saw the code I produce. 100% finite states machines. It's not because it requires a lot of experience and training, dtrict coding rules and constraints, and that it is done manually that it is not possible to do it.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
I'm not even goingbto argue with you because you know nothing of my experience and skills in assembly language. Believe me, coding more than 1.3 millions line lead me to finding alone a definitive architectural solution against stack & buffer overflow & ROP+JOP, making canaries,
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
ASLR and PMMU NX bit useless, just by modifying sligthly the architecture of any microprocessor, and having this cyber security work (it took me about 6 month of work) later on stolen by CIA and transfered to Intel and BAESystem, while me being blackmail with terrorism.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Do I won't argue with you. Code in Rust, it's an option, but coding in Rust makes you dependant of an OS, of a kernel, of libraries, full of security breaches. When I code in assembly language, usually for embedded systems, 100% of the code is my own code. I use no library.
-
If you had actually looked into Rust, you'd know it works standalone without an OS, a kernel, or anything but a tiny subset of the standard library, which is itself written in Rust and thus largely free of security flaws by design. Rust works fine on embedded systems.
- Show replies
New conversation -
-
-
I code everything myself, the old way. So clearly, it's a lot of work, but it has the advantage that 100% of the code running is mine. And that counts a lot. Of course it is not adapted to all projects, but when it is, it worth it.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.