#llsoftsecbook — Public Fediverse posts

We just significantly improved the explanation of control-flow integrity (CFI) in the Low Level Software Security Book, see https://llsoftsec.github.io/llsoftsecbook/#control-flow-integrity-cfi

The new version offers clearer, more detailed explanations to help readers better understand this important security concept.

We’d love to hear your feedback — share your thoughts here or open an issue on github at https://github.com/llsoftsec/llsoftsecbook

#LLSoftSecBook #CFI

Thank you Anders Waldenborg for writing a chapter on Underhanded Code for the Low Level Software Security Book, see https://llsoftsec.github.io/llsoftsecbook/#underhanded-code. #LLSoftSecBook

I'm trying to describe transient execution attacks in #LLSoftSecBook. I opened a PR to start introducing them and categorizing them into Spectre-like, Meltdown-like, LVI-like. I could use feedback on the PR - please have a look if this interests you, either as an expert or someone looking to learn.
https://github.com/llsoftsec/llsoftsecbook/pull/224

I just wrote a section on branch-predictor based side-channels for #LLSoftSecBook. Please take a look at https://llsoftsec.github.io/llsoftsecbook/#branch-predictor-based-side-channels. We really appreciate your feedback on this and any other content in the book.

Lucian Popescu just started an awesome chapter on compiler-introduced security vulnerabilities for #LLSoftSecBook! Please take a look! We’d really appreciate your feedback on this and any other content in the book. https://llsoftsec.github.io/llsoftsecbook/#compiler-introduced-security-vulnerabilities

We've made the online version of the Low Level Software Security book a lot nicer-looking recently, see https://llsoftsec.github.io/llsoftsecbook. Please let us know what you think can be improved further in the book. There's a "report" 💡 button at the top now to make that easy. #LLSoftSecBook