{"id":182,"date":"2009-04-09T21:05:03","date_gmt":"2009-04-10T05:05:03","guid":{"rendered":"http:\/\/www.outflux.net\/blog\/?p=182"},"modified":"2009-04-09T21:05:03","modified_gmt":"2009-04-10T05:05:03","slug":"codegate-2009-ran-ubuntu-intrepid","status":"publish","type":"post","link":"https:\/\/outflux.net\/blog\/archives\/2009\/04\/09\/codegate-2009-ran-ubuntu-intrepid\/","title":{"rendered":"CODEGATE 2009 ran Ubuntu Intrepid"},"content":{"rendered":"<p>I&#8217;m pleased to hear than the <a href=\"http:\/\/www.codegate.org\/Eng\/H_Conf\/?CodeFlag=0003\">CODEGATE 2009 International Hacking Contest<\/a> ran Ubuntu Intrepid for both the qualifying rounds and the final match.  The host machine was running the 32bit <code>-server<\/code> kernel, so <a href=\"http:\/\/www.outflux.net\/blog\/archives\/2008\/11\/21\/make-your-bios-love-security\/\">NX<\/a> was active (along with all the other <a href=\"https:\/\/wiki.ubuntu.com\/CompilerFlags\">memory-corruption protections<\/a>).  From what I can see the compiled challenges were stack-protected and fortified, so the contestants had to work around that as well as the randomized stack, heap, and library locations.  Sounds like it was a fun contest in a real-world situation.  All that&#8217;s left now is for 64bit to become the standard.  And PIE too.  I can&#8217;t wait to hear more.  :)<\/p>\n<blockquote>\n<pre>$ nm cracktris | grep _chk\r\n         U __fprintf_chk@@GLIBC_2.3.4\r\n         U __printf_chk@@GLIBC_2.3.4\r\n         U __sprintf_chk@@GLIBC_2.3.4\r\n         U __stack_chk_fail@@GLIBC_2.4\r\n         U __strcat_chk@@GLIBC_2.3.4\r\n         U __strcpy_chk@@GLIBC_2.3.4\r\n<\/pre>\n<\/blockquote>\n<p style='text-align:left'>&copy; 2009, <a href=\"https:\/\/outflux.net\/blog\/\">Kees Cook<\/a>. This work is licensed under a <a rel=\"license\" href=\"http:\/\/creativecommons.org\/licenses\/by-sa\/4.0\/\">Creative Commons Attribution-ShareAlike 4.0 License<\/a>.<br \/><a rel=\"license\" href=\"http:\/\/creativecommons.org\/licenses\/by-sa\/4.0\/\"><img decoding=\"async\" alt=\"CC BY-SA 4.0\" style=\"border-width:0\" src=\"https:\/\/i.creativecommons.org\/l\/by-sa\/4.0\/88x31.png\" \/><\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>I&#8217;m pleased to hear than the CODEGATE 2009 International Hacking Contest ran Ubuntu Intrepid for both the qualifying rounds and the final match. The host machine was running the 32bit -server kernel, so NX was active (along with all the other memory-corruption protections). From what I can see the compiled challenges were stack-protected and fortified, [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,6,14,19],"tags":[],"_links":{"self":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts\/182"}],"collection":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/comments?post=182"}],"version-history":[{"count":0,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts\/182\/revisions"}],"wp:attachment":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/media?parent=182"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/categories?post=182"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/tags?post=182"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}