2

I know there is a tag, but that is not what I am looking for. I am wondering if there are any tags that encompass traditional information leakage in binary exploitation, for example leaking stack cookies, base pointers, heap memory layout, etc. In the meantime, I created for a question.

  • what would be the differentiation between those two tags? – AviD Nov 18 '18 at 9:21
  • @AviD According to the tag wiki, Data-leakage is the uncontrolled, unauthorized transmission of classified information from a data centre or computer system to the outside. This sounds more like information disclosure, and not information leakage in the binary exploitation sense. Looking through the list of questions with that tag backs that assertion. – forest Nov 18 '18 at 9:23
  • So I'm not clear on what the new tag would introduce? Maybe I'm just not familiar with that niche... – AviD Nov 18 '18 at 9:33
  • @AviD It's a very specific kind of security vulnerability. Example – forest Nov 18 '18 at 9:44
  • Sure, but its just a specific kind of data leakage... ? – AviD Nov 18 '18 at 10:05
  • @AviD In the same way that information theft or data remanence are just a specific kind of data leakage, but we have tags for both of those. From looking through everything in data-leakage, I could not find one of them that was actually discussing the type of vulnerability called an infoleak. – forest Nov 18 '18 at 10:09
  • okay I will take your word for it, outside my expertise :-) – AviD Nov 18 '18 at 12:11
  • Could you add some usage guidance for the tag that makes it abundantly clear what it's about? I don't know the area, but if there is a more specific name I think that would be good. Like [binary-exploitation-infoleak] or whatever. I don't know what it is, though, so don't take my naming suggestions to seriously... – Anders Nov 21 '18 at 13:35

You must log in to answer this question.

Browse other questions tagged .