Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It produces a randomization either at compile time or run time, and the randomization is the security measure, which is obscured based on the idea that nobody can figure it out with ease. It is a poor security measure given the AnC attack that I mentioned. ASLR randomization is effectively this when such attacks are applicable:

https://web.archive.org/web/20240123122515if_/https://www.sy...



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: