Skip to main content

Timeline for How do ASLR and DEP work?

Current License: CC BY-SA 3.0

13 events
when toggle format what by license comment
Oct 2, 2018 at 20:14 review Suggested edits
Oct 3, 2018 at 2:31
Jun 21, 2018 at 14:50 comment added user1156544 Great explanation, and perfect length
Aug 19, 2012 at 19:53 comment added Polynomial @ThomasPornin Yeah, the nop sled technique can be good. Downside of doing it a few thousand times is that usually there's a crash after the first time.
Aug 19, 2012 at 14:40 comment added Thomas Pornin "The only reliable way to bybass DEP and ASLR": that's the tricky point. The attacker does not need a reliable way; often, a way which works only once in a thousand times is good enough, since he just needs to try a thousand times (which can often be scripted). This illustrates the limits to the effectiveness of ASLR and DEP as security mechanisms.
Aug 17, 2012 at 9:41 vote accept Polynomial
Aug 16, 2012 at 20:21 comment added Polynomial @lynks I find that self-answered questions are either repwhoring or for the good of the community. I assure you that I posted it with the latter intention. It took me a very long time to properly understand DEP and ASLR, I just hope that this answer will help someone else understand it.
Aug 15, 2012 at 10:45 comment added lynks I don't usually go for these self-answers. But this is such a good answer, I've been doing this stuff for years and I leant a few things here. Great job +1
Aug 15, 2012 at 6:34 comment added tylerl Yeah... It's almost as if the question was made for this answer. Wow.
Aug 14, 2012 at 13:05 comment added Rohan I unofficially bestow you the title of Sir Polynomial. Neat answer. xD
Aug 14, 2012 at 12:39 history edited Polynomial CC BY-SA 3.0
s/Windows/Microsoft/
Aug 12, 2012 at 15:37 comment added Polynomial @TerryChia You mean ta;cr? - Too Awesome, Couldn't Read ;)
Aug 12, 2012 at 15:30 comment added user10211 obligatory tl;dr
Aug 12, 2012 at 15:13 history answered Polynomial CC BY-SA 3.0