On: Macbook Hacker Charlie Miller: "I have a new campa...

[tlrobinson]

I really have no idea what I'm talking about, but I thought Leopard had the address space randomization I assume he's referring to?

Leopard also has some sort of sandbox feature, but apparently it's not used for Safari.

[tptacek → tlrobinson]

Nope. They've started down the path, but with these things, if you don't do it right, you may as well not have done it all.

http://www.matasano.com/log/981/a-roundup-of-leopard-securit...

[mark_h → tptacek]

That was a good read, thanks. Has it been submitted to HN?

[tptacek → mark_h]

I generally won't submit my own stuff, but that post is also pretty old. There's stuff on the blog I'm much more proud of that hasn't made it here.

[mark_h → tptacek]

Fair enough, I have to admit I haven't checked out your blog before. The age did occur to me, but Leopard is still current and I thought it was a good read.

I was mainly interested in if there had been any HN discussion on it. Thanks.