Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I would label ASLR as an obscurity measure.


It is an obfuscation. It tries to obscure where something will be rather than directly prevent or detect the attack as strong controls do. Useful, as other obfuscations are, to add speedbumps in for the attacker while preserving some level of compatibility with existing code or performance that strong security might sacrifice. That an obfuscation was recommended in a counterpoint against obfuscations was most interesting. :)




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: