{"id":394247,"date":"2010-03-05T18:00:38","date_gmt":"2010-03-05T23:00:38","guid":{"rendered":"http:\/\/techie-buzz.com\/?p=19983"},"modified":"2010-03-05T18:00:38","modified_gmt":"2010-03-05T23:00:38","slug":"dep-the-windows-security-feature-has-been-cracked","status":"publish","type":"post","link":"https:\/\/mereja.media\/index\/394247","title":{"rendered":"DEP: the Windows Security Feature has been Cracked"},"content":{"rendered":"

This week is really bad for security in particular. First we have a crack for RSA coming up, next, the Ubisoft DRM gets cracked in a day and now, DEP meets its fate.<\/p>\n

The protection feature in windows which allowed applications to run only in their own memory space has recently been cracked. The feature known as DEP was added to the Windows OS back in XP.<\/p>\n

DEP is explained by Wikipedia as,<\/p>\n

\n

Data Execution Prevention (DEP) is a security feature included in modern Microsoft Windows operating systems that is intended to prevent an application or service from executing code from a non-executable memory region. This helps prevent certain exploits that store code via a buffer overflow, for example.<\/p>\n<\/blockquote>\n

Berend-Jan Wever, a Google security software engineer has recently achieved this feat through a buffer overflow attack. A malicious piece of code is executed to take control of a certain part of the memory which then acts as the bot area to run malware codes. The exact nature of the exploit has been explained by Weaver and he has also remarked that it is a matter of days before a cracker takes advantage of this, now that he has laid out the complete process to the attack.<\/p>\n

Weaver writes,<\/p>\n

\n

I am releasing this because I feel it helps explain why ASLR+DEP are not a mitigation to put a lot of faith in, especially on x86 platforms. 32-bits does not provide sufficient address space to randomize memory to the point where guessing addresses becomes impractical, considering heap spraying can allow an attacker to allocate memory across a considerable chunk of the address space and in a highly predictable location.<\/p>\n<\/blockquote>\n

This means all 32 bit operating systems and hardwares are insecure! I tend to use Linux more than Windows. Even while connecting to the Internet, Linux works amazingly faster than Windows. And about security, Windows is not even in the league of Linux.<\/p>\n

Which Operating System do you use currently? How secure do you feel using it? How often do you face virus problems? Share your views with me.<\/p>\n

\nShare:<\/strong>
\nComment on This Post<\/a> |
\nTweet This<\/a> |
\nShare on Facebook<\/a> |
\nSave to Delicious<\/a> |
\nStumble This<\/a> |
\nDigg This<\/a> |
\nReddit This<\/a>\n<\/div>\n
TAGS:<\/strong> DEP<\/a>, Security<\/a><\/span>
\n<\/small><\/div>\n
\nDEP: the Windows Security Feature has been Cracked<\/a> originally appeared on Techie Buzz<\/a> written by Chinmoy Kanjilal on Friday 5th March 2010 06:00:38 PM. Please read the Terms of Use<\/a> for fair usage guidance. <\/div>\n

<\/p>\n

Don’t miss these Related Posts:<\/h2>\n