From owner-freebsd-security@freebsd.org Thu Mar 10 00:33:10 2016 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CF583AC82B4 for ; Thu, 10 Mar 2016 00:33:10 +0000 (UTC) (envelope-from sergej.schmidt@uni-ulm.de) Received: from smtp.uni-ulm.de (smtp.uni-ulm.de [134.60.1.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.uni-ulm.de", Issuer "Global-Uni-Ulm-CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 667C41A8E for ; Thu, 10 Mar 2016 00:33:09 +0000 (UTC) (envelope-from sergej.schmidt@uni-ulm.de) X-Virus-Scanned: amavisd-new at uni-ulm.de Received: from [192.168.0.104] (HSI-KBW-046-005-253-013.hsi8.kabel-badenwuerttemberg.de [46.5.253.13]) (authenticated bits=0) by mail.uni-ulm.de (8.14.9/8.14.9) with ESMTP id u2A0PK9p011550 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT) for ; Thu, 10 Mar 2016 01:25:20 +0100 (CET) Subject: Re: Will 11.0-RELEASE include ASLR? To: freebsd-security@freebsd.org References: <56E02D95.9020303@anongoth.pl> <201603091722.KAA24139@mail.lariat.net> From: Sergej Schmidt Message-ID: <56E0BEEB.2070901@uni-ulm.de> Date: Thu, 10 Mar 2016 01:25:15 +0100 MIME-Version: 1.0 In-Reply-To: <201603091722.KAA24139@mail.lariat.net> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="OX3nrbu9cmlENvLiXCE6WtRKo4dHF4Sj4" X-DCC-sonic.net-Metrics: poseidon 1117; Body=1 Fuz1=1 Fuz2=1 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 00:33:10 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --OX3nrbu9cmlENvLiXCE6WtRKo4dHF4Sj4 Content-Type: multipart/mixed; boundary="fC8AoqjKJt38Ccs5cPFDhW6J6sBRDLNTD" From: Sergej Schmidt To: freebsd-security@freebsd.org Message-ID: <56E0BEEB.2070901@uni-ulm.de> Subject: Re: Will 11.0-RELEASE include ASLR? References: <56E02D95.9020303@anongoth.pl> <201603091722.KAA24139@mail.lariat.net> In-Reply-To: <201603091722.KAA24139@mail.lariat.net> --fC8AoqjKJt38Ccs5cPFDhW6J6sBRDLNTD Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable > ASLR is controversial. Some see it as "security by obscurity;" others s= ee > it as extremely useful and effective. In which way ASLR has something to do with security by obscurity? Imho this is a standard security feature of a modern OS.=20 Regards, Sergej --fC8AoqjKJt38Ccs5cPFDhW6J6sBRDLNTD-- --OX3nrbu9cmlENvLiXCE6WtRKo4dHF4Sj4 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJW4L7rAAoJEHHUMn9UstdDdTUQAJTlsbroVc8djhYKJBMn1y7x bO5zz4PW+a3qGMWUevyz9kGNehhNmUKBn4I2GVrhciQUInMWalanJgSVH6MnpP6F tXl7fncV5BkV6BBsPjO6pjyvQSJN1Y/7XqRN+Hf4idzzep0LTBrUxFaNWKC2N/pn zUOv7blbKzbkzcDFvU7Vp6jSaXouUEztKUcPesX9poYEsxOwiWkdvnLIj+zGGEBd 781obhetIwDVjFG4o2Bfq/OWNXL5TCDUCtoVf/ip9tX5HVcTY22kqtKE8Z95fg6i 46Zi8aecSBLQfLDlK2vo8tMTMcoTbtykSNZdSqtFedJlyUqvZU1Gmt7ZG/bhtzrb T32QFpnf8S7YbS/KvqbN3zPXqlnCnXt+6OME2scjLK3R1p+swFDENJcUY4NMO34c 6atHLoXeU76D+0uDB4imtdr4PAXfi4Z6FNAPk38UdBIlaAJzs4xCSkejjKa1C+p2 KR+fVVIo1CFX5G/3d+zV7T1nxXva2rsXQ2KhPKYCJayk3r5Z124DDIY49OYCkNDq VUXVCmuDcDCdF2gRVniGfq2Jfr5Hai8cJlasp5DZMH0fXuECwK7lINeBph8rmDp7 1GxxO4bHxBUHZVi9gKkI5o/6yQhxjSGGESM+bbGAg9dW5fM3uoEwibhJjz/Bkn2w NImEEMBEok4kR/snACLL =Y8Cq -----END PGP SIGNATURE----- --OX3nrbu9cmlENvLiXCE6WtRKo4dHF4Sj4--