Linked by Dareka on Fri 19th Apr 2013 10:40 UTC
BeOS & Derivatives "Starting with hrev45522, address space layout randomization (ASLR) and data execution prevention (DEP) are available in Haiku. These two features, which have actually become a standard in any modern OS, make it much harder to exploit any vulnerability that may be present in an application running on Haiku, thus generally improving system security."
Thread beginning with comment 559245
To read all comments associated with this story, please click here.
Not all modern OS
by b00gie on Fri 19th Apr 2013 12:16 UTC
b00gie
Member since:
2006-06-09

Sadly the great majority of linux distros have half-baked ASLR support, most packages are not PIE-capable and the kernel implementation itself is not anything great either. Only gentoo seems to have an active hardened project this days.
Anyway, good to see Haiku expanding their security methods.

Reply Score: 8

RE: Not all modern OS
by Gullible Jones on Fri 19th Apr 2013 15:33 in reply to "Not all modern OS"
Gullible Jones Member since:
2006-05-23

Modded up because it's true.

Windows 7 ASLR has issues too last I checked (though 8 is supposedly better). But yes, Linux exploit mitigation is AFAIK kind of weak, especially on x86-32.

Reply Parent Score: 3