TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

First Handset with MTE on the Market

85 pointsby sintaxover 1 year ago

7 comments

mathiasgredalover 1 year ago
I suspect that the solution to unsafe languages like C&#x2F;C++ will end being a small sanitizer runtime like CFI(<a href="https:&#x2F;&#x2F;dslab.epfl.ch&#x2F;research&#x2F;cpi&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;dslab.epfl.ch&#x2F;research&#x2F;cpi&#x2F;</a>), that also supports some form of extended MTE, for memory safety.<p>For hot parts of the code that the sanitizer can guarantee is safe, either due to it being trivial or with annotations(<a href="https:&#x2F;&#x2F;www.open-std.org&#x2F;jtc1&#x2F;sc22&#x2F;wg21&#x2F;docs&#x2F;papers&#x2F;2023&#x2F;p2771r0.html" rel="nofollow noreferrer">https:&#x2F;&#x2F;www.open-std.org&#x2F;jtc1&#x2F;sc22&#x2F;wg21&#x2F;docs&#x2F;papers&#x2F;2023&#x2F;p27...</a>), it can safely exclude these checks to limit performance impact.<p>This seems much more realistic than e.g. Microsoft rewriting Excel in Rust with bug for bug compatibility. It would also benefit Rust code, that has sections marked as unsafe.
评论 #38138755 未加载
评论 #38139531 未加载
评论 #38138812 未加载
nfriedlyover 1 year ago
MTE = Memory Tagging Extensions, which detects memory corruption exploitation
评论 #38141143 未加载
nmstokerover 1 year ago
Despite the value this offers I&#x27;m not keen to be a guinea pig, especially as the Pixel 8 Pro already has some unpredictable lagginess with software already, so I don&#x27;t want to add to the mix with additional things that could confuse diagnosis.<p>The most annoying is the PDF viewer gets stuck but it happens with other things intermittently. It&#x27;s frustrating as these things worked fine on the Pixel 6 Pro under Android 14, so they seem like reversions or maybe something different on a system level&#x2F;perhaps even hardware related (but I&#x27;ve not looked into it to be able to tell).
评论 #38139533 未加载
评论 #38137256 未加载
chenxiaolongover 1 year ago
Related submission from earlier today: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=38125379">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=38125379</a><p>(Though this article also explains how to enable MTE for user apps and verify that it&#x27;s enabled.)
qingcharlesover 1 year ago
Ugh, I thought it would be a switch in settings. It is a lot of work at this point to enable it.<p>What was fascinating to me was that they are already picking up bugs in existing apps, which is a plus in that even having a small number of people running this will provide security for the rest of us that aren&#x27;t running it by finding buggy and malicious apps.
gavinrayover 1 year ago
Is MTE a similar idea to CHERI?
评论 #38143351 未加载
OSI-Auflaufover 1 year ago
When does this come from a not user hostile company?