Errors, Vulnerabilities & Exploits Explained

[White Scorpion]

I see after several years you still haven't lost your sharpness (Not a negative remark btw)

Well, those comments have been discussed many times (I wrote this text ~1.5 years ago) and I agree that depending on the point of view a buffer overflow would be a design error instead of a programming error, but on the other hand, if you design a program by using pseudo code it may all seem nice, but the actual programming part could create the buffer overflow.

The end user might be important, but an ideal application should be fool-proof, you can't expect a user not to take a specific action merely because the program isn't meant to be used like that


Finally, it was meant as a tutorial for the beginner and I did my best to explain everything in such a way that everyone could understand. This also means that I had to make compromises between explaining it exactly as it is but much more difficult to understand then almost exactly as it is but much easier to understand.

The tutorial mentioned from Aleph One is one of the best ones I ever read but it was also the first one I ever read about this topic and I had a hard time understanding it back then, hence the motivation for this text