[[Infowarrior] - NSA Said to Have Used Heartbleed Bug for Years]

Thu Apr 17 04:39:14 UTC 2014

BAE did this cute poster on the attack model

https://image-store.slidesharecdn.com/6f0027d2-c58c-11e3-af1f-12313d0148e5-original.jpeg?goback=%2Egde_1271127_member_5862330295302262788


On 4/16/2014 7:50 PM, Barry Shein wrote:
> On April 17, 2014 at 10:03 gdt at gdt.id.au (Glen Turner) wrote:
>   > Jason Iannone wrote:
>   > > I can't cite chapter and verse but I seem to remember this zeroing
>   > > problem was solved decades ago by just introducing a bit which said
>   > > this chunk of memory or disk is new (to this process) and not zeroed
>   > > but if there's any attempt to actually access it then read it back as
>   > > if it were filled with zeros, or alternatively zero it.
>
> Actually those were my words trying to describe kernel management of
> disk blocks, sparse files, etc, not user space.
>
>    -b
>
>

-- 
-------------

Personal Email - Disclaimers Apply