« first day (3033 days earlier)      last day (2145 days later) » 

03:26
and the planned remediation was to replace it with musl -- isn't that out of the frying pan, into the fire when it comes to heap exploitation? ;) https://twitter.com/bleidl/status/878718521475203072
Which NCC Group noted as well :)
I've been telling people this for years.
Although musl is a lot better in many ways, its malloc is terrible.
Even glibc's crappy ptmalloc is better than their dlmalloc.
A project I was on was to port the hardened copperhead malloc (the Android bionic malloc with security features from OpenBSD's malloc) to musl. I ended up just doing it via /etc/ld.so.preload so I could hook all the malloc-related functions. :P
 
9 hours later…
Anonymous
12:44
lol.
Anonymous
A mod shut down that idiot.
Anonymous
Thank fuck. By the way @forest in a few days, I will own a company so if you still want GRSecurity, willing to talk to you about it in private.

« first day (3033 days earlier)      last day (2145 days later) »