I should find an real-world safe Rust program that has exploitable stack overflow and actually exploit it as a proof of concept.
-
though as you well know, splitting code into security-sensitive and not doesn't tend to work well in practice
How so? I'm talking about proper designs of course, not the kind of stuff that ships in game consoles.
-
-
It can work in some scenarios, but I'm thinking of things like browsers where the attack surface is huge.
-
I mean, if the goal is not to prevent RCE but only to contain it, you can limit TCB to the sandbox, but uck
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.