Jump to content
hake

Advanced Settings in MBAE 1.12.1.139 for bottom-up ASLR for Google Chrome?

Recommended Posts

Windows 7 users will appreciate the ability of MBAE to enable bottom-up ASLR which, I understand, increases the entropy of ASLR in Windows 7.  Windows 8 and later seem to offer greater ASLR entropy than Windows 7.  I am therefore wondering if the new protections for Google Chrome introduced in MBAE 1.12.1.136 and 1.12.1.139 automatically take care of this Windows 7 issue and enable bottom-up ASLR for chrome.exe.  Does the enforcement of this particular mitigation using MBAE require a dll injection into chrome.exe?  If not then why cannot the MBAE user configure MBAE to do this?

For all I know, Google Chrome might itself enforce bottom-up ASLR but doubt it because MBAE previously provided for it in Advanced Settings.

Edited by hake

Share this post


Link to post
Share on other sites

Further to this, MBAE 1.12.1.139 no longer lists Chrome.exe in the shield list, even though the change log states protections for chrome are included, and notification tooltips do not display when starting the Chrome browser. I actually prefer having the tooltip popup just for that extra re-assurance that all is well.

Share this post


Link to post
Share on other sites

I have no doubt that the MBAE team will make things much clearer in due course. I imagine that all their resources are devoted to providing their users with as effective protection for Google Chrome as the previous methods still in use for other browsers provide. The ingenuity of these people must be considerable. Who knows that the new protections might be even better.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.