Registry tweak to disable ASLR

Hi,

Can you implement the following registry tweak to disable ASLR ?

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]
"MoveImages"=dword:00000000

Kind regards

Hello,

For the moment I do not add this, for security reason, because I found that :

"Address Space Layout Randomization (ASLR) is a security feature that randomizes the position of data in memory, making it more difficult for attackers to predict where data can be found while in memory. This feature has been enabled in Windows since Windows Vista, and other operating system such as Linux and MacOS implement this in some form as well."

If you have more information about that, just let me know.

Best Regards.

winterstorm2050

Hi,

Yes it is a so called "security tweak" which I disable on my Windows since it results in better application performance especially when using virtual machines for various services. Professional malware bypasses this patchwork done by Microsoft anyways. If possible, please add it in the options and make it not activate by default. Microsoft forces you to use ASLR if you want to run Internet Explorer 11 with the latest updates.

Here's the article that explains that DEP and ASLR are already defeated:

http://blogs.technet.com/b/srd/archive/2010/12/08/on-the-effectiveness-of-dep-and-aslr.aspx

Kind regards

Excellent ! I will have a look and let you know ...