that's the point, was not a weaponized device, does not mean it did not go boom.
depends on the definition of bomb: Ivy Mike was not a weapon, was a nuclear device, as big as a building
Pledge is much easier to user that seccomp-bpf and is now forced in more than half of the binary distribuited in the base system. Also, there is a big difference between having a technology and enforcing the technology:…
a fundamental difference between W^X and PAX is that PAX can be disabled on a per binary based, where W^X is applied on the whole system. That more aggressive aproach has been applied first on OpenBSD and i like to…
that's the point, was not a weaponized device, does not mean it did not go boom.
depends on the definition of bomb: Ivy Mike was not a weapon, was a nuclear device, as big as a building
Pledge is much easier to user that seccomp-bpf and is now forced in more than half of the binary distribuited in the base system. Also, there is a big difference between having a technology and enforcing the technology:…
a fundamental difference between W^X and PAX is that PAX can be disabled on a per binary based, where W^X is applied on the whole system. That more aggressive aproach has been applied first on OpenBSD and i like to…