After yesterday's discussion about the use of Turing-Complete in exploitation papers, and realizing how commonly the other important term close to my heart, "weird machine", is misunderstood, I wrote a (rather unpolished) blog post about it. addxorrol.blogspot.com/2018/…
8
76
12
151
oh boy, for how many years did i want to write (about) this! another aspect many people miss is that TC computation requires the result on the *same* tape, not some subset of it. think about what it means for exploitation ;).
1
3
6
but if that same python script gains memory access to process memory that doesn't belong to scripts but the rest of the python process then we get a security problem (the practical term is 'sandbox escape' and the like).
Oct 3, 2018 · 11:00 AM UTC
1
1


