[Dailydave] Elephants and information leaks

[Dave Aitel]

https://immunityproducts.blogspot.com/2018/11/recent-kernel-memory-disclosure-bugs-in.html

We don't usually detail publicly the amount of engineering that goes into a
CANVAS exploit. But above is a blogpost about some of our recent work. If
you are a CANVAS Early Update customer, the Windows effort is available for
download - otherwise if you are a CANVAS customer, you already have the
Linux exploit. :)

For various other reasons, I'm going to this conference in a couple weeks:
http://carnegieendowment.org/2018/12/05/international-policy-conference-on-government-vulnerability-management/jzma
. It's an "International policy conference on government vulnerability
management" or, in other words, a chance for various interest groups to
lobby that the only sane and responsible thing to do with vulnerabilities
is what they would prefer, and that ideally it should be enshrined in law
and international treaties. Should be fun, considering how few of them are
the type of people to read the papers linked above. :)

-dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.immunityinc.com/pipermail/dailydave/attachments/20181114/d54ad6bd/attachment.html>