Hacker News new | ask | show | jobs
by tester34 2030 days ago
What's the goal of the ASLR when software still can workaround it like e.g game cheats that "just" calculate those addresses?
3 comments

ASLR is part of a larger suite of bar-raising security mechanisms [1]

[1] https://en.wikipedia.org/wiki/Defense_in_depth_(computing)

Once you can execute arbitrary code it's easy to figure out. The point is that it makes it harder to get a vulnerability to the point where it executes arbitrary code in the first place.
We're talking about different security models. Whereas anti-cheat companies seek to prevent code execution or introspection in a certain context (the game) by a user that already has full privileges over the machine, other mitigations seek to prevent privilege escalation or initial access. For example (simplification), a remote exploit that relies on a specific address to work would now have to find an additional information leak. Similarly, code running in usermode cannot simply* know the addresses of objects in the kernel.

* In practice this isn't really true, and there are many ways to bypass KASLR