OpenRCE

📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.

About Articles Book Store Distributed RCE Downloads Event Calendar Forums Live Discussion Reference Library RSS Feeds Search Users What's New

Customize Theme

Topic created on: December 9, 2008 10:29 CST by reynaudd .

Google wants web apps to run x86 code directly. I guess that makes my x86 interpreter in javascript obsolete...

They use a sandboxing technique to prevent arbitrary code execution, described in the research paper here:
http://nativeclient.googlecode.com/svn/trunk/nacl/googleclient/native_client/documentation/nacl_paper.pdf

reynaudd		December 16, 2008 04:01.07 CST
A first overview at the sandboxing technique used and the first exploit here: http://indefinitestudies.org/2008/12/15/a-first-look-at-google-native-clients-inner-sandbox/

frozenrain		December 17, 2008 04:17.46 CST
sandboxing technique ,new technique?

reynaudd		December 17, 2008 04:44.08 CST
> frozenrain: sandboxing technique ,new technique? it looks quite new to me. They try to ensure that the binary can be reliably disassembled, ensure that no illegal instruction is present, and then check that every jump targets a valid instruction. It becomes a bit hairy with indirect jumps though.

Note: Registration is required to post to the forums.

There are 31,328 total registered users.

Imagery

SoySauce Blueprint
Jun 6, 2008