Memory corruption has plagued systems since the dawn of computing. With the rise of defense techniques (such as stack cookies, ASLR, and DEP), attacks have become much more complicated, yet control-flow hijack attacks are still prevalent. Attacks rely on code reuse, often leveraging some form of information disclosure. Stronger defense mechanisms have been proposed but none have seen wide deployment so far due to the time it takes to deploy a security mechanism, the incompatibility with systems/software, and most severely due to performance overhead. In this talk, we evaluate the security benefits and limitations of the status quo and look into upcoming defense mechanisms (and their attacks).