After yesterday's discussion about the use of Turing-Complete in exploitation papers, and realizing how commonly the other important term close to my heart, "weird machine", is misunderstood, I wrote a (rather unpolished) blog post about it. addxorrol.blogspot.com/2018/…
8
76
12
151
oh boy, for how many years did i want to write (about) this! another aspect many people miss is that TC computation requires the result on the *same* tape, not some subset of it. think about what it means for exploitation ;).
1
3
6
Same tape vs subset is a slightly different argument (someone would argue that that subset can define a different TM and claim TC on it [infiniteness aside, because the larger tape isn't infinite either]). Ppl just replace "cond branching + ability to change arb memory" with TC
2
1
Replying to @xerub @halvarflake
but if that same python script gains memory access to process memory that doesn't belong to scripts but the rest of the python process then we get a security problem (the practical term is 'sandbox escape' and the like).

Oct 3, 2018 · 11:00 AM UTC

1
1