miniblog.

Adding LLVM control flow integrity to make exploits harder is coming to Rust: https://rcvalle.com/docs/rust-cfi-design-doc.pdf The primary use case is mixing C/C++ with Rust: you have weaker memory safety guarantees and hardening is still necessary. You don't want a partial Rust port to reduce security!

It's the logical progression of vulnerabilities, but the weaponisation of zero-day exploits with no user interaction is scary. https://citizenlab.ca/2020/12/the-great-ipwn-journalists-hacked-with-suspected-nso-group-imessage-zero-click-exploit/

Deep dive on the Fuchsia kernel, ots architecture, and how it is hardened against exploits: