Hacker News Reader

> "as popular and user-friendly as sanitizers" solution for critical and performance-hungry applications.

Google just did enable Memory Tagging Extension (ARM's hardware accelerated sanitizers) on the Pixels last year. May be sanitizing ISAs offer hope?

View on HN

MTE is good to have, but it only reduces the probability of successful attacks (by a factor of 16). If the process is allowed to segfault multiple times attackers have a good chance to work around MTE.

That's a general limitation with tagged pointers, I belive? Have you come across demonstrations of such exploits?

Do you have a source for that? AFAIK Pixel 7 uses an ARM v8.2 CPU, which doesn't support MTE. The upcoming Pixel 8 might support it, but Google hasn't announced anything yet.

I'm going by the bugreports I see for a FOSS app I develop: https://github.com/celzero/rethink-app/issues/962

See: https://source.android.com/docs/security/test/memory-safety/...

Reply on news.ycombinator.com