Collaborate Disseminate
What should be secret AWS and API keys were (un)secured with the default password credentials: “admin” as the name, “admin” for a password. Continue reading 2 million lines of source code left exposed by phone company EE
class LockdownUnlock{
private:
/*snip*/
std::string rootCertificate; //Will this protect the data?
/*snip*/
public:
/*snip*/
}LDUnlock;
via the inimitable and funny Daniel Stori at turnoff.us
The post Daniel Stori’s ‘Commitland’ appeared first on Security Boulevard.
Continue reading Daniel Stori’s ‘Commitland’
Recently I came across to a situation where an institution has hired a third party vendor to develop its business applications. I came up with the following questions related to penetration testing and independent third party… Continue reading Penetration Testing vs Secure Source Code Review
Permalink
The post NDC Security, Patricia Aas’ ‘Secure Programming Practices in C++’ appeared first on Security Boulevard.
Continue reading NDC Security, Patricia Aas’ ‘Secure Programming Practices in C++’
I want to build a process for reviewing libraries used in Software/Web development for vulnerabilities . Can someone suggest on some ways to achieve this.
Tavis Ormandy (a member of Google’s Project Zero organization) has found, reported and the offending Grammarly code fixed by Grammarly in reportedly (by Tavis) in record time). A small bit of advoce for Grammarly, and others: Have your code thor… Continue reading Fast Times At Grammarly High…
via the eponymous Daniel Stori at turnoff.us!
Permalink
The post Daniel Stori, ‘The Last Resort’ appeared first on Security Boulevard.
Continue reading Daniel Stori, ‘The Last Resort’
I work in a medium sized startup as DevOps Engineer and we need to hire a security engineer. Since I have never done it, the company asked me to create an environment where the security engineer candidate should do his tasks … Continue reading Need to create an interview environment for a Security Engineer candidate
I’m new to secure code review. I know that strlen will calculates the length until it finds a null character. This is a part of a larger code.
char* executeMount(char* password, char* path, int unmountOrMount)
{
char* catS… Continue reading Buffer overflow due to strlen, strcpy, strcat