From c3f5f59c4545ac75eebac8a9d51719e0d12e17ce Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Thu, 17 Dec 2020 01:32:46 -0500 Subject: move more content to the features page --- static/features.html | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) (limited to 'static/features.html') diff --git a/static/features.html b/static/features.html index e1a10453..780ff4b0 100644 --- a/static/features.html +++ b/static/features.html @@ -67,10 +67,18 @@
  • Stronger app sandbox
  • Hardened libc providing defenses against the most common classes of vulnerabilities (memory corruption)
    • -
  • Our own hardened malloc (memory allocator) +
  • Our own hardened malloc (memory allocator) leveraging modern hardware capabilities to provide substantial defenses against the most common classes of vulnerabilities (heap memory corruption) along with - reducing the lifetime of sensitive data in memory
    • + reducing the lifetime of sensitive data in memory. The hardened_malloc project is + portable to other Linux-based operating systems and is being adopted by other + security-focused operating systems like Whonix. The + hardened_malloc + README has extensive documentation on it. Our allocator also heavily influenced the + design of the next-generation + musl malloc implementation which offers substantially better security than musl's + previous malloc while still having minimal memory usage and code size. +
  • Hardened compiler toolchain
  • Hardened kernel
  • Prevention of dynamic native code execution in-memory or via the filesystem for the base OS without going via the package manager, etc.
    • -- cgit v1.3.1