hwhatwhatwhat

spread of Fear, Uncertainty and Doubt

I agree with your comment but, what's with the capitalization of these words?

This reminds me of the shady tactics Dropbox used to acquire the dropbox.com domain. Before that, they only had getdropbox.com.

I suppose if you have VCs bankrolling you, you can do whatever you want.

It's okay, was a very reasonable assumption! I'll make sure I comment on HN appropriately in the future.

My apologies, I didn't see your other reply before I deleted and reposted the comment. I thought I'd replied to the post and not the comment, so I deleted and reposted, did not realise you had detached it.

I'm sorry for posting low quality comments and won't do it again.

If I understand you correctly, I can see what you mean about emotional openness being a more feminine trait, and understand your implication that homosexual males may lean more towards that behaviour too (stereotypically, at least) - but I really don't understand what race has to do with this?

Never used it, don't really get why I'd want to. I don't see the benefit.

What specific protections do you have in mind?

This is a remote code execution vulnerability.

I understand how this vulnerability can be used to corrupt the heap, as it's writing more data than malloc was asked to reserve, so it can overwrite memory allocations from other parts of the program.

I am curious as to how would one create a reliable remote code execution exploit out of this? I guess that one may be able to find a function pointer somewhere to overwrite, and use that to control program flow to your shellcode - but as this is dynamically allocated memory, could it not be adjacent to pretty much anything?

How would an attacker approach making a remote code execution exploit, given these constraints? Is it possible in practice or more theoretical?

(I'm not challenging this classification, just would really like to know how this works!)