Theo de Raadt at CanSecWest: Synthetic Memory Protections