Hacker News
points by Someone 1 day ago | 0 comments
It’s harder nowadays, with address space layout randomization and no-execute stacks, but the basics are

- https://en.wikipedia.org/wiki/Stack_buffer_overflow#stack_sm...

- https://en.wikipedia.org/wiki/Return-oriented_programming

I think that’s how lots of RCE bugs start, so it may not be rocket science, but lots of software falls for it.

[–] embedding-shape 1 day ago
I'm sorry, but I still find it hard to believe you work with other professionals that when they implement telemetry in client applications, that usually ends up exposing a RCE on the client because of the telemetry implementation.
Hacker News