Re: [cap-talk] RumpelTree++
"Jonathan S. Shapiro" <[email protected]> Sun, 27 Jul 2014 13:34:52 -0700
| Newsgroups | gmane.comp.lang.e.general |
|---|---|
| Message-ID | <CAAP=3QNx17cpWZ6Ccc6re0+tZCfcbf9OepUU1JeXSPJW5O7KEQ@mail.gmail.com> |
On Sun, Jul 27, 2014 at 1:27 PM, Rob Meijer <rmeijer-qWit8jRvyhVmR6Xm/[email protected]> wrote: > So would you say in-process zeroing of secrets after usage to protect > against malloc attacks has become totally unneeded? No no. I never said that. In-process zeroing is *essential*. Mainly because their are various ways to read in-process memory. I'm just saying that the paging subsystem isn't the failure model you are guarding against. _______________________________________________ e-lang mailing list [email protected] http://www.eros-os.org/mailman/listinfo/e-lang