blog

commit: 95ef1fd0b26f80f87bf80744f0784afd47d4ab48
parent 6e7be2b2d23e8e3e54f014d2cdc1ef07001f232b
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date:   Tue,  2 May 2023 23:24:36 +0200

bookmarks: https://www.vusec.net/projects/anc/

Diffstat:
M
bookmarks.html
3
++-
M
bookmarks.xbel
4
++++

2 files changed, 6 insertions(+), 1 deletion(-)
diff --git a/bookmarks.html b/bookmarks.html
@@ -36,7 +36,7 @@
 		<h1>Bookmarks</h1>
 		<p>
 			This is generated from <a href="/bookmarks.xbel">/bookmarks.xbel</a>, a standard-compliant <a href="http://pyxml.sourceforge.net/topics/xbel/">XBEL</a> file, which you can process and import in some browsers. (XSLT file used for it: <a href="/bookmarks.xsl">/bookmarks.xsl</a>).<br/>
-			It currently contains 237 links.
+			It currently contains 238 links.
 		</p>
 		<section id="Autism">
 			<h2>Autism <a href="#Autism">§</a></h2>
@@ -103,6 +103,7 @@
 				<dt><a rel="external noreferrer" href="https://www.viva64.com/en/b/0558/">Why it is important to check what the malloc function returned</a></dt>
 				<dt><a rel="external noreferrer" href="https://github.com/pypa/pip/issues/7325">Disallow execution of setup.py when "pip download --no-deps someproject"</a></dt>
 				<dt><a rel="external noreferrer" href="https://github.com/pypa/pip/issues/1884">Avoid generating metadata in `pip download --no-deps ...`</a></dt>
+				<dt><a rel="external noreferrer" href="https://www.vusec.net/projects/anc/">ASLR⊕Cache (AnC)</a></dt><dd>Demonstration of a cache-based attack of ASLR, browser JavaScript and Native Code</dd>
 			</dl>
 		</section>
 		<section id="onion">
diff --git a/bookmarks.xbel b/bookmarks.xbel
@@ -79,6 +79,10 @@
 		<!-- or rather insecurity… -->
 		<bookmark href="https://github.com/pypa/pip/issues/7325"><title>Disallow execution of setup.py when "pip download --no-deps someproject"</title></bookmark>
 		<bookmark href="https://github.com/pypa/pip/issues/1884"><title>Avoid generating metadata in `pip download --no-deps ...`</title></bookmark>
+		<bookmark href="https://www.vusec.net/projects/anc/">
+			<title>ASLR⊕Cache (AnC)</title>
+			<desc>Demonstration of a cache-based attack of ASLR, browser JavaScript and Native Code</desc>
+		</bookmark>
 	</folder>
 
 	<folder>