41–42 of 42 posts
Of course you'll need a TigerLake chip for it to do anything. Are those even released yet?
Earlier quoted context omitted.
My point is that ASLR makes assumptions about the attackers capabilities. All good mitigations do. If the attacker has "I can run nearly arbitrary computations on within the processes memory space", that is outside of the model that ASLR attempts to deal with. For example, ASLR for a process that executes Javascript is probably not going to be as useful as ASLR for a process that receives network requests.
How so? As far as I understand, being able to leak an ASLR slide from JavaScript is considered to be a security bug in every browser engine, because they do not intentionally provide access to that information.