Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Do the skills actually transfer? If your goal is to learn assembly and/or how a computer executes code, you can probably learn that more directly by spending an afternoon on godbolt. If your goal is to learn computer security, I'm not sure there's really much transfer to be had here. Most of the interesting computer security things to know are at a much higher elevation now.

Many of these will simply not compile without explicitly disabling a compiler warning, and except in rare cases, the rop challenges are impossible.

I'm just commenting on what a huge win I feel it is for the software industry that in the past 15 years these went from "copy the binary to your local machine and it works exactly the same, gcc doesn't even warn about this" to "it doesn't realistically have this vulnerability when run on your machine, nor will it build from source on your machine."

edit: wikipedia is claiming linux has had ASLR since 2005 so maybe I'm wrong.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: