Notices by Shawn Webb (lattera@mastodon.social)

This sentence right here shows why ASLR is a foundational and useful exploit mitigation:

"This creates a situation where it’s possible to build a dictionary of addresses for a given firmware, then repeatedly launch the exploit until we have brute forced the correct set of addresses."

We in #HardenedBSD use the PaX model for our ASLR implementation. We use the PaX model because it has a proven successful track record.

https://blog.exodusintel.com/2017/07/26/broadpwn/

#FreeBSD #infosec

#HardenedBSD is now publishing official arm64 nightly 12-CURRENT builds! http://jenkins.hardenedbsd.org/builds/HardenedBSD-CURRENT-arm64-LATEST/

#LibreSSL in #HardenedBSD 12-CURRENT has been updated to 2.5. Building a binary update now. Package builds will start soon.