On Thu, Jun 5, 2014 at 8:34 AM, J. Ryan Stinnett <jry...@gmail.com> wrote:

> On Thu, Jun 5, 2014 at 10:03 AM, Robert Kaiser <ka...@kairo.at> wrote:
> >> It's also security boost for 64 bit users.
> >
> >
> > Could someone please explain why you and Google claim 64bit to be more
> > secure? This is a new argument to me and I wonder what's behind it.
>
> As stated in Google's announcement[1], the main security improvement
> is (better) address space layout randomization.


Exactly.

See also: http://cseweb.ucsd.edu/~hovav/papers/sppgmb04.html

-Ekr

 Even though that
> exists in 32 bit too, it's more effective with 64 bit since the VM
> space is so much larger. Looks like Windows has a specific "high
> entropy"[2] version that's 64 bit only.
>
> [1]:
> http://blog.chromium.org/2014/06/try-out-new-64-bit-windows-canary-and.html
> [2]:
> http://blogs.technet.com/b/srd/archive/2013/12/11/software-defense-mitigating-common-exploitation-techniques.aspx
>
> - Ryan
> _______________________________________________
> dev-platform mailing list
> dev-platform@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-platform
>
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to