hardenedlinux · HackerTrans

Submissions

Stealthy RCE on Hardened Linux: Noexec and Userland Execution PoC

hardenedlinux.org

9 pointsby hardenedlinuxil y a 3 mois8 comments

Automated Linux Kernel CVE Detection for the EU CRA (Cyber Resilience Act)

hardenedlinux.org

1 pointsby hardenedlinuxil y a 4 mois0 comments

0day Industry

github.com

2 pointsby hardenedlinuxil y a 9 mois1 comments

The Path to Memory Safety Is Inevitable

hardenedlinux.org

6 pointsby hardenedlinuxl’année dernière0 comments

ARM TrustZone Audit: Securing vs. Non-Securing Memory Separation

github.com

3 pointsby hardenedlinuxl’année dernière0 comments

Userland Exec bypassing bypassing SELinux's execmem, mprotect, and W^X

github.com

4 pointsby hardenedlinuxil y a 2 ans3 comments

Container Hardening Process

hardenedlinux.org

2 pointsby hardenedlinuxil y a 2 ans0 comments

Build Artanis-0.6 on Ubuntu-24.04

hardenedlinux.medium.com

1 pointsby hardenedlinuxil y a 2 ans0 comments

How to access websites hostile toward Tor through Tor

hardenedlinux.org

1 pointsby hardenedlinuxil y a 3 ans0 comments

Boot Unguarded: x86 Trust Anchor Downfalls to Leaked OEM Tools and Signing Keys

hardenedlinux.org

3 pointsby hardenedlinuxil y a 3 ans0 comments

Reverse Engineering of Intel Microcode UpdateStructure

ieeexplore.ieee.org

3 pointsby hardenedlinuxil y a 5 ans0 comments

CHIPSEC v1.5.10 supports the latest PaX/GRsecurity and vanilla kernel

github.com

2 pointsby hardenedlinuxil y a 5 ans0 comments

Cheap PCB story

github.com

100 pointsby hardenedlinuxil y a 5 ans30 comments

Kernel state based fuzzer: a LLVM approach

github.com

50 pointsby hardenedlinuxil y a 6 ans8 comments

Harbian-qa: State-based target directed fuzzer based on syzkaller

github.com

2 pointsby hardenedlinuxil y a 6 ans0 comments

10 Years of Linux Security – A Report Card

twitter.com

1 pointsby hardenedlinuxil y a 6 ans0 comments

Fully open source manufacturable PDK for a 130nm process

youtube.com

1 pointsby hardenedlinuxil y a 6 ans0 comments

Harddns: DoH( DNS over HTTPS) implementation for multiple OS

github.com

1 pointsby hardenedlinuxil y a 6 ans0 comments

Libre/open hardware design/manufacture and security

github.com

1 pointsby hardenedlinuxil y a 6 ans0 comments

Huawei HKSP Introduces Trivially Exploitable Vulnerability

grsecurity.net

2 pointsby hardenedlinuxil y a 6 ans0 comments

comments

hardenedlinux

il y a 6 ansdiscuss

Video: https://www.youtube.com/watch?v=F_Kza6fdkSU

PDF: https://grsecurity.net/10_years_of_linux_security.pdf

PPTX: https://grsecurity.net/10_years_of_linux_security.pptx

hardenedlinux

il y a 8 ansdiscuss

It's unlikely to be affected by spectre-like attack since Rocket chip based core doesn't have speculative exec.

https://riscv.org/2018/01/more-secure-world-risc-v-isa/ https://www.sifive.com/blog/2018/01/05/sifive-statement-on-m...

hardenedlinux

il y a 9 ansdiscuss

We've been using PaX/Grsecurity on Debian( as server) and Linux Mint( as Desktop) for a while. It's working perfect fine until now. You can also tweak the reproducible builds as well:

https://github.com/hardenedlinux/grsecurity-reproducible-bui...

As exmaple of Linux Mint: https://hardenedlinux.github.io/system-security/2016/01/10/h...

hardenedlinux

il y a 9 ansdiscuss

as citypw posted it on:

https://lwn.net/Articles/703000/

We don't have such leap of faith in KSPP due to there are several exploitable bugs( CVE-2017-0358, CVE-2016-1583, CVE-2016-0728, CVE-2017-6074, CVE-2017-7184, etc), which can be turned to "massive" exploitations in past couple of months. And it's just the tip of the iceberg in past 16 years:

https://lwn.net/Articles/721122/

There are tons of features from PaX/Grsecurity, e.g: PAGEEXEC/SEGEXEC/ASLR/KERNEXEC/UDEREF/MPROTECT/RAP/etc. None of them are created by KSPP even though some vendors integrated some of features( weakened usually) into hardware in recent years.