Re: "Perfect" or "Provable" security both crypto and non-crypto?

From: Rob Warnock (rpw3_at_rpw3.org)
Date: 09/15/04 

Date: Wed, 15 Sep 2004 06:53:08 -0500

Lassi Hippeläinen <lahippel@ieee.orgies.invalid> wrote:
+---------------
| New processor designs from Intel and AMD implement a hardware sandbox
| that separates executable code from non-executable data.
+---------------

The problem is that you have to be able to selectively "open the sandbox"
if you need to do anything involving run-time generation of code, such
as JIT compilers or the sort of incremental (re)compilation most Common
Lisp implementations support by default or even just run-time relocation
of shared libraries! After all, for the dynamic loader, code *is* just data!

A lot of complex apps will break if you just blindly turn on the NX bit...

-Rob

-----
Rob Warnock <rpw3@rpw3.org>
627 26th Avenue <URL:http://rpw3.org/>
San Mateo, CA 94403 (650)572-2607

Quantcast