#binexp — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #binexp, aggregated by home.social.
-
CW: FSOP is back
A colleague of mine gave me this link yesterday: https://github.com/Mymaqn/reenabling_fsop_on_libc2_35
I have tested a bitm and It does seem to be true that FSOP is possible again with GLIBC 2.35. No mitigation available yet.
The method requires strong primitives which are not seen too often (multiple arb. writes, libc leak and libc read), but it is possible.
I suspect that it will only be a matter of time before an easier method will be found.