[Cryptography] NVIDIA Dynamic Code Optimization (DCO)

[Tom Mitchell]

On Thu, May 21, 2015 at 9:09 AM, Henry Baker <hbaker1 at pipeline.com> wrote:

> FYI -- "DCO": Yet more lovely places for malware to hide.  The executing
> code is "translated" into a microcode buffer, but who gets to be in charge
> of said translation?

.....

> What, me worry?
>


If this is a worry it pays to look hard at JIT in your favorite interpreted
language.   JustInTime compilation is how Java, JavaScript, Dalvik,
and many more modern interpreted languages run fast.
There are also tricks where a JavaScript program can contain native
binary code which is difficult to scan and debug.
Yes there be dragons there....

Hardware sandboxes with tall walls please.

-- 
  T o m    M i t c h e l l
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20150522/380413c3/attachment.html>