client binaries appear to be missing security mitigations

ForeverFun · January 31

At least for EC (UOSA.EXE), and possibly CC as well.

Missing security mitigations such as DYNAMICBASE.

Should probably also set LARGEADDRESSAWARE, at least until native x64 binary[s'] are built?

Expected result: binaries should have all current security mitigations enabled.

p.s. is broadsword OK with instructions being posted on how to remedy some aspects of this?

Mariah · February 1

I think it would be safer to convey that information in an email - uo@broadsword.com should be the appropriate address.

ForeverFun · February 1

Mariah said:

I think it would be safer to convey that information in an email - uo@ broadsword.com should be the appropriate address.

I've never received any reply for bug reports sent to that email address (nor fixes in publishes). Problem with my email, or on the broadsword side?

I can be reached here via direct/private message.

Comments