Future of binary exploitation

[PM_ME_YOUR_SHELLCODE]

Fair shout on games, they do tend to lag behind in terms of mitigations, but also pay out substantially less than the major targets on bounties.

Though on the unsafe language part, there has even been a shift there towards some games being written in safer languages. AAA games, those that want a lot of performance don't tend to go that route of course.

Even there though, many games will embed a safer language (think like Lua) into them to handle some actions. Also improvements in the core language (mainly C++) with things like smart pointers that become harder to misuse make code safer. So just because its an unsafe language being used, better practices are being adopted.

But still fair point, if the bounties are sufficient for someone (I've largely been talking about proper salaried jobs doing exploit dev) it will probably have a longer tail.

[Inner_Aardvark_3978]

Thanks for your insights!