[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / r / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip / qa] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/g/ - Technology


Thread archived.
You cannot reply anymore.


[Advertise on 4chan]


File: IMG_6047.jpg (224 KB, 1644x934)
224 KB
224 KB JPG
Now that everyone writes open source software in rust, is binary exploitation dead?
>>
yes, rust software has no bugs and is in fact flawless
>>
>>100186913
>ButtplugFutureStateShared
>>
>>100186913
What is the point of reversing rust code? You wont find any memory exploits, what are you hoping to find if you do that? Logic errors?
The new trend is open source so reversing is no longer needed
>>
>>100186929
if you write malware, you cannot just recompile user's program that you're trying to attack.
>>
File: IMG_6048.jpg (996 KB, 750x749)
996 KB
996 KB JPG
>>100186939
If its open source software you dont need to
Correct me if im wrong but in a world of rust open source software binex does not exist as a field, i mean you could analyze rust binaries but if its open source why bother right?
>>
>>100186976
having code doesn't change the fact that malware has to exploit the binary
>>
File: IMG_6049.png (1.24 MB, 750x1334)
1.24 MB
1.24 MB PNG
>>100186981
But is there any type of binary exploitation to perform on rust binaries?
>>
>>100187020
all same exploits work
>>
File: IMG_6052.png (1.21 MB, 750x1334)
1.21 MB
1.21 MB PNG
>>100187036
Ok try to do buffer overflow or heap overflow in rust? Which exploits exactly work in rust?
>>
>>100188165
all of them
>>
It will be harder, but it won't be zero.
>>
>>100186895
You either don't understand how binary exploitation works, how rust works or both.

No, it doesn't.

>>100188165
All it takes is a bug in unsafe part, or bug in compiler or non-memory related vulnerabilities. Rust provides some strong guarantees, and it will in fact makes it harder to find an exploit, but by no means it prevents *all* possible exploits.
>>
>It's impossible because it says so on the tin!
don't be naive
>>
>>100188373
>All it takes is a bug in unsafe part, or bug in compiler or non-memory related vulnerabilities.
of C code they depend on because Rustroons cannot replace C, LMAO.
>>
>>100186895
Binary exploitation is and will forever be more powerful than whatever safe programming languages you could invent.
>>
File: IMG_6055.png (1.32 MB, 750x1334)
1.32 MB
1.32 MB PNG
>>100188721
But binary exploits dont work on rust binaries right? As long as we dong use unsafe we are good
>>
File: IMG_6056.png (1.43 MB, 750x1334)
1.43 MB
1.43 MB PNG
>>100188541
Ok but thats a c issue
Safe rust is immune to binex right?
>>
>>100189891
>>100189876
No, it's not secure against BINARY EXPLOITATION. Binex doesn't exist, it's not what the action is called.
Anyway, there have been thousands of rust compiler bugs, and there will be thousands more.
We're in the decade of eternal alpha software.
>>
>>100188721
can you binary exploitation on JAVA ?
>>
>>100189997
Java runs on jvm. That's even easier. What kind of question is this?
>>
>>100190032
do you think you could binary exploitation a network service or a desktop application written in JAVA? you don't have much access to the JVM only the application written in JAVA
>>
>>100188373
Of course he doesn't understand shit, he's a stupid fucking studentnigger
>>
>>100190120
well no because of the garbage collector memory exploits are invalid, righjt?
>>
>>100188541
There even is an operating system written entirely from scratch in Rust without any C.

Why do ciniles always have the most ignorant takes?
>>
>want to use Rust
>Rust can't handle async C signals
>can't abort certain blocking syscalls
What do?
>>
>>100190772
Tokio::signal
>>
>>100190772
You mean the Unix signals or what?
>>
>>100191358
Yes.
>>
>>100190360
Are you sure? How is that possible?
>>
File: IMG_6057.jpg (112 KB, 1024x768)
112 KB
112 KB JPG
>>100192187
Bruh
>>
>>100186929
>>100186976
>>100187020
>>100188165
This is the future programmer, blindly trusting tools he doesn't understand and never questioning what he's told.
>>
>>100190316
At the end of the day it's all is C under the hood the same problems in C in are in every language



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.