The recent XCodeGHost incident tells how insecure it is for Chinese software. Personally I've been long-time aware of the huge problem in Chinese software, but I was still surprised that even the core developers from software giants enjoy such a terrible hobby: downloading 3rd-party development tool (or using p2p-based downloading tool to download development tool) - what business secrets you can hold if you fail to protect your core development environment? IMO the security of Chinese-based software is still in the Stone Age - They have gone so far and are still running so quickly while (unfortunately) there is no serious security review/process taken in place.
Here I'd like to quickly go through the most obvious issue: ASLR. What I have chosen here are the most popular software used in China, I think each of them enjoys hundreds of millions –level users. As you will find, none of them fully enables ASLR in their processes. Even ASLR have been introduced by Microsoft since 2007 and has been proven an effective mitigation to stop exploits and it's quite easy for developers to enable it.
This is what I saw on the latest Tencent QQ 7.6.
Here I'd like to quickly go through the most obvious issue: ASLR. What I have chosen here are the most popular software used in China, I think each of them enjoys hundreds of millions –level users. As you will find, none of them fully enables ASLR in their processes. Even ASLR have been introduced by Microsoft since 2007 and has been proven an effective mitigation to stop exploits and it's quite easy for developers to enable it.
This is what I saw on the latest Tencent QQ 7.6.
The previous two are relatively good, I’d guess they know ASLR but failed on some of the DLLs. However, the following Xunlei (Thunder, 迅雷) is pretty bad: look at the dlls they shipped, almost all of them are non-ASLR (including 3 main programs), have they even heard of ASLR?
The Alibaba’s AliWangWang (阿里旺旺) (their popular tool for online purchasing and chatting) is also not good.
In the security world, ASLR is now a baseline for software security or in any software development – even Microsoft has started to credit findings of non-ASLR issues in their software. In this quick post we showcased the most obvious non-ASLR ones in the most popular Chinese software, this could be considered as a side view reflecting how bad it is for China's software security. However, their problem is far more than this, hopefully I will be able to contribute more time on them and write something down.
Thanks,
Haifei
Haifei
ReplyDeleteI am so grateful for your article.
Dell Notebook repairs & Hp Notebook repairs & HP Laptop repairs
Haifei'S Random Thoughts: Quick Post: Aslr In China >>>>> Download Now
Delete>>>>> Download Full
Haifei'S Random Thoughts: Quick Post: Aslr In China >>>>> Download LINK
>>>>> Download Now
Haifei'S Random Thoughts: Quick Post: Aslr In China >>>>> Download Full
>>>>> Download LINK Dr
Great post so thanks for this.
ReplyDeleteInternet explorer customer service
Email support service is available 24x7. Contact Email Toll-Free number + 1855-558-1999 and get help quickly. If you have any queries related to Email account or you are unable to login. Our technical team contacts to you and resolve your issue in a minimal time.
ReplyDeleteGmail tech support number
Gmail Toll-Free number
Gmail help support number
Gmail customer Service Number
Gmail customer care phone number
Yahoo email password reset
Yahoo email password recovery tool
Yahoo mail customer service number
Yahoo mail help support number
Yahoo mail customer Support Number
Outlook password reset
Outlook password Recovery tool
Outlook customer Service Number
Outlook customer Support Number
Outlook Toll-free Number
Outlook provides email services to send or read the message from mobile, desktop etc. Outlook is really nice and safe email service provider of Microsoft.
ReplyDeleteAll these are for apple technical support queries given below
ReplyDeleteapple store phone number
call apple support number
call apple support
apple support iphone
apple support phone number usa
apple support number usa
apple support phone
apple phone support
contact apple support phone number
contact apple phone number
apple support contact number
apple contact number
apple help phone number
apple help number
apple phone number
apple tech support phone number
apple tech support number
apple tech support
apple customer service phone number
apple customer service number
apple customer service
apple customer support phone number
apple customer support number
apple customer support
apple technical support phone number
apple technical support number
apple technical support
apple support phone number
apple support number
Great thanks for sharing this blog. We provide Hotmail customer service for the user help. You can visit us for Hotmail account solution.
ReplyDeleteHotmail support team always ready for your help with this account. Any problem is always solved by them. Your help is our first motive and you can dial any time Hotmail customer support number 1-844-305-6556. We feel proud if we give you some solution.
ReplyDeleteSEO Company in Almora.
ReplyDeleteDigital Marketing Service Almora Uttarakhand.
Website Promotion Company Almora uttarakhand.
PPC Service in ALmora Uttarakhand
Thanks for sharing, nice post! Post really provice useful information!
ReplyDeleteCông ty vận chuyển hàng nước ngoài FadoExpress hàng đầu chuyên vận chuyển, chuyển phát nhanh siêu tốc đi khắp thế giới, nổi bật là dịch vụ gửi hàng đi mỹ, gửi hàng đi úc và gửi hàng đi đài loan và dịch vụ chuyển phát nhanh đi hàn quốc uy tín, giá rẻ
Many Gmail users irritate when they are unable to recover the password of their Gmail account, yet to recover the password is quite simple to achieve. If you, in case, forgot Gmail password and want to recover your account with the new password, you must contact one of our Gmail experts immediately to get your account recovered on time.
ReplyDeleteYahoo mail is a popular email platform that allows its users to share messages with other users. However, some of its users are facing the ongoing issue of Yahoo mail not receiving emails into their account inbox. If you are unable to fix this issue on your own, call directly one of our Yahoo experts.
ReplyDelete
ReplyDeleteoutlook set folders cannot be opened
outlook information store could not be opened
cannot start microsoft office outlook
cannot start microsoft office outlook error
outlook set folders cannot be opened
How spanking this post . A lot of thanks for such good shared . Keep continue sharing . Photo Background Remove
ReplyDeleteeCommerce image Optimization
Image Editing Help
Photo Editing Guideline
Masking help
Photoshop Tutorials
Photo Cut Out
Webshop Image Retouch
Image Manipulation
Photoshop Service Help
This article is out of the roof. Wow! Wonderful. Great Post!
ReplyDeletehttps://www.aarinkaur.com/
https://www.aarinkaur.com/Contact-Mumbai-Escorts-Aarin.html
https://www.aarinkaur.com/Mumbai-Escorts-Rate-Card.html
https://www.aarinkaur.com/Mumbai-Escorts-Location.html
https://www.aarinkaur.com/Mumbai-Escorts-Location.html
It is good to hear that your store is now expanding to new locations. I have been a patron of Fantastic Eyes because of all the wonderful work that you guys do. marketing assignment uk I hope that this expansion move of yours will turn out to be successful. I will definitely go and see this new store of yours
ReplyDeleteIgnou Synopsis is a private firm that deals in Ignou projects. We offer Ignou PGDPPED Project to all the students of Ignou university. PGDPPED is a post-graduation Pre-Primary Education course important for each and every student. If you are looking for help in composing projects then you can completely depend on us. We offer the best assignments as well as Ignou PGDUPDL Project support. We have been in this industry for more than 10 years.
ReplyDelete
ReplyDeleteNice Blog for Qatar Student. It may take some time at first but then you can enjoy the services of the best agency throughout the year. Great Assignment Help provides the best service for other company.
Great Nice post keep writing. What should be included while doing language analysis, here are the point conclusion or final words are the same so you can analyze language only on one condition is that first, you must know basic core knowledge of that language. You have information on its numerous aspects, different characteristics, and its techniques too. And take a look at my blog post.
ReplyDelete
ReplyDeleteWe are assisting thousands of businesses to provide inspirational Custom boxes custom packaging. An array of add on and finishing options are available to make your custom boxes worth noticing. customboxesbulk.com is an ardent supporter of green sustainable packaging; all our boxes are made from 100% recyclable materials.
Thanks for sharing this best stuff with us! Keep sharing! I am new in the blog writing. All types blogs and posts are not helpful for the readers. Here the author is giving good thoughts and suggestions to each and every reader through this article. Quality of the content is the main element assignment writing companies of the blog and this is the way of writing and presenting.
ReplyDeleteAssignment help services in Australia help students to complete their assignments within a given timeframe. Your writing skills will gradually improve if you follow and apply the expert's style in your assignment writing. You should practice regularly in order to improve them.
ReplyDeleteThis is a good idea for people who actually have some questions or inquiries about this topic. I am so excited to see the discussions that will be made on this thread regarding taxes. I have to say that this kind of topic should really be discussed thoroughly to people who finds it helpful so that help with assignment crux there won't be no confusions anymore.
ReplyDeleteOnce we receive the information about your packaging needs, t boxes the customer representative will specifically call you and share the potential quote.
ReplyDeleteWhat Is the Turnaround Time for Placed an Order? To begin with, t boxes the turnaround time differs for every project because it depends on the number of boxes you’ve ordered and your unique needs.
I believe this will help your website become more organized because you have decided to set a part on this site for the inquiries regarding tax and as well as the helpful discussions. To be honest, this is one of the few sites that are doing this kind of strategy. Also, I think that this will not only benefit your clients or the potential ones but you most especially write my dissertation because you will be able to see the questions easier.
ReplyDeleteThanks for the lovely health benefit you bring to the viewers. Its cool and supper knowledgeable. I appreciate your so much for sharing this inspiring piece. Meanwhile, visit past questions for waec english pdf
ReplyDeleteHaifei'S Random Thoughts: Quick Post: Aslr In China >>>>> Download Now
ReplyDelete>>>>> Download Full
Haifei'S Random Thoughts: Quick Post: Aslr In China >>>>> Download LINK
>>>>> Download Now
Haifei'S Random Thoughts: Quick Post: Aslr In China >>>>> Download Full
>>>>> Download LINK Zn
Quality tips on how to write a poetry analysis essay are waiting for you here! Welcome to a professional website with various writing services to get online in a very short time!
ReplyDeletegood
ReplyDelete