HN user
Take a look at Netflix, here's one at random but I believe they're all like this:
https://jobs.netflix.com/jobs/294103648
"The overall market range for roles in this area of Netflix is typically $180,000 - $900,000."
Really amazing work here!
A colleague pointed out that FPAC[1] in ARMV8.6-A likely prevents this attack, is that right?
I haven't fully digested the paper, but the gadgets seem to rely on AUT, and "Implementations with FPAC generate an exception on an AUT* instruction where the PAC is incorrect"
[1] https://community.arm.com/arm-community-blogs/b/architecture...
Not exactly what you're asking for, but there's this for Linux - https://www.aon.com/cyber-solutions/aon_cyber_labs/introduci...
Bunnie Huang gave an excellent talk on this subject at BlueHat IL 2019 that goes very deep, including showing technical details of how attacks like this can be pulled off. Well worth the 45 minutes - https://www.bunniestudios.com/blog/?p=5519
ROP does not bypass ASLR or canaries. It does bypass DEP/NX in the sense that it executes code that already exists in executable memory.
Neither. The existing Office desktop apps are already sandboxed.
Diana can't just "decide to take her profits" at whatever price she'd like. If she wants $1m but Charlie isn't interested, she will have to lower her price until he is. This is how exchanges work, cryptocurrency or otherwise. If a stock falls to zero, do you think that Etrade dips into its own assets to provide an "off ramp" to its customers that weren't able to sell in time?
You're essentially saying that the exchange should artificially prop up the price of bitcoin with its own money during a panic.