‹ BackHN Continuity

Thread

Data-only attacks are easier than you think (2024)

102 points · 45 comments · segfaultbuserr

  1. joa- · · focus · HN ↗
    This showed me that taint analysis is kind of slept on. Maybe we should invest in better tooling that allows us to reverse engineer with taint analysis easier. Do we think it is a UI problem? Of course over tainting is a thing, but maybe we can make it work with better UI.
    1. setr · · focus · HN ↗
      Is that really the name for it? It sounds revolting

      Can’t we just use prim and proper terms like provenance

      1. QuantumNomad_ · · focus · HN ↗
        The main meaning of taint is contamination. Not really a revolting term to me. Maybe you associate it with some of its other meanings and that’s why you find it revolting.
        1. stackghost · · focus · HN ↗
          “Taint analysis” is certainly evocative.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.