Viewing profile — RolfRolles

No, it's really not a strict improvement. A meaningless name like `v2` does at least convey that you, as the analyst, haven't understood the role of the variable well enough to ren…

Yes, gadgets arising from non-epilogue instances of C2/C3 are used frequently. In fact they are most often critical and the ROP exploit would not work without them.

As I said to the other user who replied to a similar comment, these observations apply only to exploitation of stack buffer overflows, and hence don't rebut what I've said about th…

Your comments only apply to exploitation of stack buffer overflows, which have largely been rendered extinct due to compiler-based strategies like this one. Exploiting, say, a use-…

I also must be missing something. XORing the return address on the stack with the stack pointer is similar to other stack protection mechanisms. I forget the precise name of it, bu…

I think some timing attacks could be reasoned about in a formal context. You could model the timing details of a given CPU and then prove that two assembly language functions were …

In 2007 I started researching program analysis on my own. I noticed that a lot of freely-available source code was written in OCaml. Then I was supposed to get involved with an aca…

I've tried literally about a dozen times at this point. Only once did I get some sort of response from the server; now clicking "place order" simply does nothing. Too bad; they got…

Unfortunately, the site does not behave gracefully under heavy traffic. Berkeley resident here, tried to order one of each, but the "place order" page just times out and I am not s…

Being a reverse engineer who knows what symbolic execution is, is a lonely occupation :( http://www.openrce.org/blog/view/2049/[video]_Semi-Automated...