17What do ASLR, DEP/NX, stack canaries, PIE and RELRO each prevent, and what does an attacker need to get past each one?▼mediumNewGoogleMicrosoftApple◆ premiumReciting the acronyms is the easy part. The scored answer pairs each mitigation with the exploitation step it blocks and the precondition that defeats it, which is why they only work together.Open full answer →
45Conceptually, how does a memory-safety bug become reliable code execution, and which modern mitigations break each step of that path?▼hardNewGoogleMicrosoftApple◆ premiumA crash is not an exploit. Turning one into the other takes several steps, and every modern mitigation is designed to break one of them.Open full answer →