laymansterms

5 ms·

1. 1.▲
   by laymansterms 2y ago

   Yeah, one CVE is literally "You can use the MacOS variant of LD_PRELOAD on the client to hook libc calls! Oh no!!" This is a bogus CVE; any application can perform arbitrary actions when its system calls are hooked, but it requi
2. 2.▲
   by laymansterms 2y ago

   He actually did mention it if you look at the blog post his quote comes from. He's specifically calling for a Linux-ABI-compatible rust kernel that just re-implements things as they were rather than trying to delve into new researchy O
3. 3.▲
   by laymansterms 2y ago

   Unfortunately, they also have plenty of low-quality venues that dilute the discoverability of the high-quality ones. Some orgs (Usenix for instance) hold to at least a decent standard across nearly all their research conferences, so I can b