Live data from Hacker News

ROP Emporium: Learn return-oriented programming through a series of challenges

ropemporium.com

1–10 of 18 posts

Re: ROP Emporium: Learn return-oriented programming through a series of challenges

#2
This looks like a nice variety of challenges! I've always found constructing ROP chains extremely satisfying, even more than regular exploit development.

As a plug, I wrote a blog post solving a similar exercise using a ROP chain: http://www.kvakil.me/posts/ropchain/ . It looks pretty similar to the pivot challenge here.

Re: ROP Emporium: Learn return-oriented programming through a series of challenges

#8
I am pretty sure this is quite an unpopular opinion, but I think that the biggest issue we have in computer security is culture.

Information security breaches are not victimless crimes. The ubiquity of massive security failures shows that they are not rare occurrences. I believe that this symptomizes a failure of our culture, related to an inability to integrate information technology into the proper context within our society.

Sure, we need to be aware of exploit patterns so that we can make structural improvements, but we don't need to become jolly experts in them. We should stop glorifying cyber-criminals.

Re: ROP Emporium: Learn return-oriented programming through a series of challenges

#9
post #8

I am pretty sure this is quite an unpopular opinion, but I think that the biggest issue we have in computer security is culture. Information security breaches are not victimless crimes. The ubiquity of massive security failures shows that they are not rare occurrences. I believe that this symptomizes a failure of our culture, related to an inability to integrate information technology into the proper context within o…

[deleted]

Re: ROP Emporium: Learn return-oriented programming through a series of challenges

#10
post #8

I am pretty sure this is quite an unpopular opinion, but I think that the biggest issue we have in computer security is culture. Information security breaches are not victimless crimes. The ubiquity of massive security failures shows that they are not rare occurrences. I believe that this symptomizes a failure of our culture, related to an inability to integrate information technology into the proper context within o…

Not trying to be rude at all but that's a bit of a dream world. In all of human history the very second someone invents a lock, someone else starts figuring out how to break it. This is extremely unlikely to change, mostly because it's fun and rewarding.

I'd agree the biggest issue in Computer Security is culture but it's not that too many people learn what security is, it's the complete and utter disregard that the majority of developers show for the basics. Combine that with a general attitude of Security experts looking down at non-experts (I think this is getting MUCH better thankfully) and it's no wonder most systems are like Swiss cheese and full of wholes.

Post reply on HN