If you want to make sure your computer or server is not tricked into undertaking malicious or undesirable behavior, it’s not enough to keep bad code out of the system. New research shows that the process of building bad programs from good code using “return-oriented programming” can be automated and that this vulnerability applies to multiple computer architectures.