Update on canary randomisation for hardened Linux applications
This article is a followup to our last year’s advisory on canary randomisation for applications of the Debian distribution.
I was recently asked what the currently employed method is for canary randomisation in SSP-armoured Linux applications. I’ve been meaning to write an article on this for some time now, but didn’t have the necessary time. So here it is (albeit a little late).
read more...