Abusing Exceptions for Code Execution, Part 2

Saving Memory Subsystem Bandwidth

Making an Asynchronous Breakfast in .NET

Horizontally Scaling PostgreSQL

Issue #325

1/31/2023

{{PreviewText}} 

Hey-ya
Sorry for the delay today, had a late start. Thanks for all of the kind words in the feedback for yesterday's issue! I really appreciate it.
Here's the issue.

====================================================================

Today's Sponsor: Telerik DevCraft

Build feature-rich, modern experiences for Web, Mobile and Desktop, faster than ever with Telerik and Kendo UI components.

====================================================================

Abusing Exceptions for Code Execution, Part 2

Published: 30 January 2023
Tags: infosec, windows

Bill Demirkapi explores how the concepts behind Exception Oriented Programming can be abused when exploiting stack overflow vulnerabilities on Windows.
Some highlights:

  • Exception Oriented Programming (EOP) is a method of executing arbitrary operations by chaining together code from legitimate modules
  • An attacker can use a return-to-dl-resolve attack to dynamically calculate the security cookie
  • Similar vulnerabilities also exist in Linux


====================================================================

Saving Memory Subsystem Bandwidth

Published: 30 January 2023
Tags: c, c++, memory, optimization

Ivica Bogosavljević discusses ways to make software run more efficiently, with a focus on using less memory resources.
Some highlights:

  • The goal is to make programs that are "frugal" in their use of resources, in contrast to programs that are focused on speed
  • There are two ways to make programs more frugal: CPU policies and modifying the program
  • Ivica explores both


====================================================================

Making an Asynchronous Breakfast in .NET

Published: 10 January 2023
Tags: c#, dotnet, sponsored

In this article, breakfast is used to demonstrate how asynchronous programming works in .NET and what its advantages are over synchronous programming.
Some highlights:

  • Comparison of a synchronous and asynchronous implementation
  • Highlights native .NET methods for async programming
  • Underlines the drawbacks of using async programming


====================================================================

Horizontally Scaling PostgreSQL

Published: 5 January 2023
Tags: distributed systems, postgres

The author of this article covers the different approaches to using postgres as a distributed database.
Some highlights:

  • Horizontal scaling is the art and science of distributing data across multiple servers without compromising data integrity, transaction safety and query performance
  • Physical replication aims to replicate the “physical”, on-disk layout of the primary server’s data files by relaying WAL records that essentially encode the deltas of the file contents
  • Logical replication works by recording and replaying the SQL-level transactions, rather than copying the final data directly


-

How did I do?

* Amazing
* Articles not relevant to me
* Articles were relevant, but badly written
* Summaries told me everything I wanted to know
* I like turtles

Want to help?
Thank you for reading! If you enjoy the newsletter, I would really appreciate you helping me spread the word by forwarding this to your friends and colleagues or sharing it on social media! Get cool stuff for your referrals using your link https://abyteofcoding.com.

Your referrals:


If you want to discuss or comment on this issue, head on over to this page at A Byte of Coding. You can also subscribe there if you're new!

Have comments or feedback? Just reply to this email or hit me up on Twitter @AByteOfCoding.

Email landed in your promotions tab? Please move it over to primary so you don't miss the latest issues in the future.
Thanks for your Support! 
Big thanks to all of the Patreon supports and company sponsors. If you want to support the newsletter you can checkout the Patreon page. It's not necessary, but it lets me know that I'm doing a good job and that you're finding value in the content.


Stats (updated daily)

Sent: 3041

Opens: 1460

Clicks: 309

Link Clicks Clicks % Unique Clicks Unique Clicks %
Abusing Exceptions for Code Execution, Part 2 48 23.30% 54 25.35
Saving Memory Subsystem Bandwidth 70 33.98% 70 32.86
Making an Asynchronous Breakfast in .NET Awaiting Update Awaiting Update Awaiting Update Awaiting Update
Horizontally Scaling PostgreSQL 88 42.72% 89 41.78

Previous

Back to Issues

Next