PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Software Security Ideas Ahead of Their Time

blog.trailofbits.com | research | #memory-safety | #history | #education | #research | #software-security | #type-safety | #programming-languages | #mailing-list
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Andrew Ruef's guest post revisits a 1995 mailing-list thread whose participants anticipated memory safety and other software security problems decades before research formally addressed them.
Published
Collected

Related coverage

research · blog.trailofbits.com
Trail of Bits Releases Capture the Flag Field Guide
Trail of Bits releases the free CTF Field Guide, self-guided coursework from Dan Guido's NYU-Poly course and DARPA training material, to help students build skills and form Capture the Flag teams.
research · portswigger.net
Top 10 Web Hacking Techniques of 2017 - Nominations Open
PortSwigger revives the annual Top 10 web hacking techniques list after a two-year hiatus, opening nominations for 2017 and 2016 with community input and an expert panel.
research · depthfirst.com
Behind the GitLab RCE: A depthfirst Journey into the Ruby Ecosystem
The investigation shows how memory-safety flaws in native Ruby gems can become remotely reachable through widely deployed applications such as GitLab. Teams should inventory native-extension dependencies and move self-managed GitLab and Oj installations to fixed releases.
research · depthfirst.com
Going depthfirst: Achieving GitLab RCE via Two Ruby Memory Corruption Vulnerabilities
We chained two memory-safety flaws in Oj, a native Ruby JSON parser used by GitLab's notebook diff renderer, into remote code execution in a Puma worker. The path begins with an attacker-controlled Jupyter notebook and crosses GitLab, ipynbdiff, CRuby, and jemalloc before reaching function-pointer control.
research · depthfirst.com
21 Zero-Days in FFmpeg
depthfirst's autonomous agent discovered 21 zero-day vulnerabilities in FFmpeg and produced reproducible PoC inputs at a fraction of typical cost; several bugs had lain latent for 15-20 years.
research · swarm.ptsecurity.com
Hack the Elephant One Bite at a Time: JPEG-Related Memory-Safety Bugs in PHP
PT SWARM audited PHP's ext/standard C code and found memory-safety bugs: a heap memory disclosure in getimagesize() and a heap buffer overflow in iptcembed(), both reachable via crafted JPEGs.
Back