Filter
Exclude
Time range
-
Near
2️⃣ Upload item data: Information for each jewel was uploaded to ORIGYN system 3️⃣ Mint digital certificates: ORIGYN minted mimmutable digital certificates, permanently recording them on a blockchain network, ensuring lasting authenticity.
9
42
OpenBSD's mimmutable isopenbsdsecu.re/mitigations…

2
196
lwn.net/Articles/960465/ Theo de Raadt: sharing the experiences and insight gained from implementing mimmutable() in OpenBSD.
1
4
60
4 Nov 2024
Replying to @lauriewired
I wonder why they didn't borrow OpenBSD's mimmutable
1
1
58
7,394
Theo de Raadt was involved in discussions with aligning Google's mseal with OpenBSD's much simpler mimmutable, it changed quite a bit in later patch series. On OpenBSD, most of a programs static address space (.text/ld.so's .text/.bss/main stack) is now automatically immutable.
The Linux kernel 6.10 introduces the mseal syscall for memory protection. Discover its unique features, how it differs from prior schemes, its kernel implementation, and the userspace exploits it prevents. hubs.la/Q02VNW-30
3
17
1,009
A few characters basically stated before that "OpenBSD mimmutable(2) is useless" If it is so useless, why have paid employees at Google been spending the past 6 months cloning mimmutable to make mseal() for defending Chrome? 🤔 marc.info/?l=linux-kernel&w=…

1
6
27
3,643
#OpenBSD mimmutable(2) no longer permits RW -> R demotion for immutable mappings: marc.info/?l=openbsd-cvs&m=1… Further context: marc.info/?l=linux-kernel&m=…

3
4
1,395
Theo de Raadt at CanSecWest: Synthetic Memory Protections undeadly.org/cgi?action=arti… #openbsd #security #rop #mimmutable #aslr #stacksmash #heapsmash

1
22
33
4,840
Theo de Raadt at CanSecWest: Synthetic Memory Protections undeadly.org/cgi?action=arti… #openbsd #security #rop #mimmutable #aslr #sta cksmash #heapsmash

4
8
1,092
Highly recommend watching this talk about recent mitigation work in #OpenBSD, xonly, mimmutable, pinsyscall, etc. much of which is upcoming in 7.3. 👍
23 Mar 2023
CanSecWest: Synthetic Memory Protections - Beyond R, W, and X - Theo DeRaadt x.com/i/broadcasts/1kvJpmkYk…
1
3
17
2,278
I love how OpenBSD's work on mimmutable naturally lead to xonly. 😊
3
300
anton@ modified regress/sys/uvm/Makefile: Retire wx_syscall regress tests, they have been failing since the introduction of mimmutable(2) and also needs to cope with xonly on some architectures by now. There's already the syscallwx target in regress/usr.bin/lastcomm which does...
2
3
67
#FreeBSD Home Assistant | bsdbcr adventureloop Listen now: bsdnow.tv/485 Tails of the M1 GPU, Getting Home Assistant running in a FreeBSD 13.1 jail, interview with AWK creator Dr. Brian Kernighan, Next steps toward mimmutable, Unix's (technical) history is (1/2)

1
1
2
389
17 Dec 2022
FreeBSD Home Assistant | @bsdbcr @adventureloop Listen now: bsdnow.tv/485 Tails of the M1 GPU, Getting Home Assistant running in a FreeBSD 13.1 jail, interview with AWK creator Dr. Brian Kernighan, Next steps toward mimmutable, Unix's (technical) history is mostly old

6
9
1,178
mimmutable() : a new syscall for #OpenBSD to mark some regions of memory as immutable - Article by @lwnnet lwn.net/SubscriberLink/91564…

2
10 Dec 2022
mimmutable() for OpenBSD lwn.net/SubscriberLink/91564…

2
9 Dec 2022
[$] mimmutable() for OpenBSD lwn.net/Articles/915640/ #LWN

1
3
deraadt@ modified libexec/ld.so: The next step for mimmutable(). ld.so figures out what regions of memory of startup shared library mappings can be made immutable, and also does this for dlope() RTLD_NODELETE and subsidiary libraries. Complexity in this di...

3
4