←back to thread

A brief look at FreeBSD

(yorickpeterse.com)
130 points todsacerdoti | 1 comments | 12 Nov 25 12:10 UTC | HN request time: 1.076s | source
Show context
unacorner ◴[12 Nov 25 20:50 UTC] No.45906465[source]▶
It took FreeBSD almost 20 years to implement ASLR:

https://svnweb.freebsd.org/base?view=revision&revision=34396...

Is security not a priority for their developers?

replies(2): >>45907088 #>>45907735 #
1. avadodin ◴[12 Nov 25 22:27 UTC] No.45907735[source]▶
ASLR implemented at the mmap level in 32 bits(which was 100% of FreeBSD usage in 2005) is less than 20bits of randomness try 1M times and you've broken it add to that limitations in early implementations where large swaths of the address space were reserved for kernel and shared libraries and you're in a scenario where many of your exploits maybe fail to run the first couple of times and that's ignoring side channels or kernels such as Linux degrading back due to difficulty adapting some other feature to use ASLR.