BC binaries: DEP and ASLR?

[chrroe]

Hi Scooter-Team,

today I came across an interessting blog-post about security of Windows binaries:

http://0xdabbad00.com/2012/12/05/fin...-dep-and-aslr/

The author offers a web check for DEP and ASLR called SlopFinder. Some of the first files I've checked were the executables of my beloved BC 3.3.5 ... they seem to belong to the unprotected ones.

Since I know, that BC is written in Delphi and Visual Studio is seemingly not used, I wonder if the used Delphi compiler offers the secutity flags mentioned in the article.

Or does it not make sense to use them? Any technical obstacles?


Bye
Christoph

[Zoë]

Hi Christoph,

We'll look into enabling them in BC4. Since we support both BC2 viewer plugins and Total Commander's packer plugins I don't want to enable them in BC3 builds since they probably wouldn't get enough testing.