EPISODE · Mar 30, 2023 · 1H 8M
[binary] 200th Episode! Integer Bugs & Synthetic Memory Protections
from Day[0] · host dayzerosec
Its our 200th episode, and we've got some stats from our first 200 episodes. Then we talk some Pwn2Own policy changes, a couple memeable overflows, and some new anti-ROP mitigations on OpenBSD. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/200.html [00:00:00] Introduction [00:00:52] Spot the Vuln - Just a Coupon [00:04:56] 200th Episode [00:14:52] Pwn2Own Vancouver 2023 - The Full Schedule [00:23:26] WellinTech KingHistorian SORBAx64.dll RecvPacket integer conversion vulnerability [00:28:23] ARM TrustZone: pivoting to the secure world [00:34:33] Synthetic Memory Protections - An update on ROP mitigations [00:57:51] Vulnerabilities 1002: C-Family Software Implementation Vulnerabilities The DAY[0] Podcast episodes are streamed live on Twitch twice a week: -- Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities -- Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits. We are also available on the usual podcast platforms: -- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063 -- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt -- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz -- Other audio platforms can be found at https://anchor.fm/dayzerosec You can also join our discord: https://discord.gg/daTxTK9
What this episode covers
Its our 200th episode, and we've got some stats from our first 200 episodes. Then we talk some Pwn2Own policy changes, a couple memeable overflows, and some new anti-ROP mitigations on OpenBSD. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/200.html [00:00:00] Introduction [00:00:52] Spot the Vuln - Just a Coupon [00:04:56] 200th Episode [00:14:52] Pwn2Own Vancouver 2023 - The Full Schedule [00:23:26] WellinTech KingHistorian SORBAx64.dll RecvPacket integer conversion vulnerability [00:28:23] ARM TrustZone: pivoting to the secure world [00:34:33] Synthetic Memory Protections - An update on ROP mitigations [00:57:51] Vulnerabilities 1002: C-Family Software Implementation Vulnerabilities The DAY[0] Podcast episodes are streamed live on Twitch twice a week: -- Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities -- Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits. We are also available on the usual podcast platforms: -- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063 -- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt -- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz -- Other audio platforms can be found at https://anchor.fm/dayzerosec You can also join our discord: https://discord.gg/daTxTK9
NOW PLAYING
[binary] 200th Episode! Integer Bugs & Synthetic Memory Protections
No transcript for this episode yet
Similar Episodes
Sep 22, 2023 ·20m
Sep 22, 2023 ·20m
Sep 22, 2023 ·27m
Sep 22, 2023 ·14m
Sep 22, 2023 ·24m
Sep 22, 2023 ·22m