Share
Go down
ntuser1

Registry tweak to disable ASLR

on Wed 3 Sep 2014 - 0:33
Hi,

Can you implement the following registry tweak to disable ASLR ?

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]
"MoveImages"=dword:00000000

Kind regards
avatar
winterstorm2050
Admin
https://www.winreducer.net/

Re: Registry tweak to disable ASLR

on Sat 6 Sep 2014 - 17:04
Hello,

For the moment I do not add this, for security reason, because I found that :

"Address Space Layout Randomization (ASLR) is a security feature that randomizes the position of data in memory, making it more difficult for attackers to predict where data can be found while in memory. This feature has been enabled in Windows since Windows Vista, and other operating system such as Linux and MacOS implement this in some form as well."

If you have more information about that, just let me know.

Best Regards.

winterstorm2050
ntuser1

Re: Registry tweak to disable ASLR

on Sat 6 Sep 2014 - 17:08
Message reputation : 100% (1 vote)
Hi,

Yes it is a so called "security tweak" which I disable on my Windows since it results in better application performance especially when using virtual machines for various services. Professional malware bypasses this patchwork done by Microsoft anyways. If possible, please add it in the options and make it not activate by default. Microsoft forces you to use ASLR if you want to run Internet Explorer 11 with the latest updates.

Here's the article that explains that DEP and ASLR are already defeated:

http://blogs.technet.com/b/srd/archive/2010/12/08/on-the-effectiveness-of-dep-and-aslr.aspx

Kind regards
avatar
winterstorm2050
Admin
https://www.winreducer.net/

Re: Registry tweak to disable ASLR

on Sat 6 Sep 2014 - 17:27
Excellent ! I will have a look and let you know ... Wink
Back to top
Permissions in this forum:
You cannot reply to topics in this forum