Re: Automatic Exploitation Paper Peer Review

[Charles Miller <cmiller () securityevaluators com>]

Perhaps you should point out that some of the things that make the problem they solve "trivial" include:

Can't handle heap overflows
Can't handle stack canaries
Requires source code
Can't handle ASLR
Can't handle DEP

So with these restrictions, its hard to see how it has any real world, practical impact at all. 

Charlie
_______________________________________________
Dailydave mailing list
Dailydave () lists immunityinc com
https://lists.immunityinc.com/mailman/listinfo/dailydave