Brad Spengler

Brad Spengler

@spendergrsec · Twitter ·

People finally caught on (sortof) to what I said 8 years ago ( https://x.com/grsecurity/status/929407342655008770 ) that nobody knows what they're doing with the pointer hashing stuff, with %pK use for printks being the proof: https://lore.kernel.org/linux-hardening/Z4Z2TW_HaANvT4VH@smile.fi.intel.com/T/#t

grsecurity

grsecurity

For instance, completely missing the point of %pK, then after realizing dmesg_restrict exists in the kernel after working for a month on silly hashing of all kernel addrs in dmesg, Linus lashes out against us for no reason. The dmesg restriction comes from Openwall & works fine