Undeadly is proud to present a new series of interviews with OpenBSD developers. Often we focus on the technical aspects of recent commits and new subsystems; this series aims to uncover the personal side of the people that make OpenBSD tick. This month we've tracked down Todd C. Miller (millert@), a member of the project since the early years.
Read more...Paul Irofti forwards us "an interesting article about bypassing stack protection in OpenBSD written by chris_fs on NewOrder. The article explains some theoretical concepts and provides the code to back them up mainly for testing and further exploration."
In recent years there has been a lot of focus on so called anti-exploit techniques being built into operating systems. These techniques come in a wide range of functionality but all with the same goal, to make the process of writing functional exploits harder, if not impossible. The general idea is that you will never be able to write 100% bugfree code so you have to make the process of exploiting these bugs harder. One of the operating systems that was among the first to incorporate some of these techniques and has probably also taken it the furthest is OpenBSD...
...In this article I will show you a theoretical scenario where these measures can be subverted, the scenario that is laid out is perhaps not very likely to exist in a realworld application (although not completely unheard of), and this article should be seen more as food for thought on the subject of circumventing anti-exploit techniques than a practically applicable technique.
Read the full article on NewOrder.
Jeremy has added Liar and Hypocrite to his Quote list on KernelTrap, in which Theo de Raadt says to Richard Stallman, “Since you did it three times so rapidly, I am calling you a liar. And since you refuse to undo your commercial support in Emacs and GCC, I am going to call you a hypocrite.”
Meanwhile, FSF continues to approve of two operating systems that do not meet Richard's rules: ReactOS and GNU Darwin.