Security Blog

The latest news and insights from Google on security and safety on the Internet

Auditing open source software

October 8, 2007
Share on Google+ Share on Twitter Share on Facebook
Google

6 comments :

Security Retentive said...

Can you comment on how these defects were detected - code review (manual or automated), fuzz testing, other?

David Thiel's paper and talk from Blackhat this year talked about specific file fuzzers for media formats and such and the major lesson for me is that building file-specific fuzzers like that that subtly tweak file formats is laborious.

I'd be interested to know how you detected these, and what your experience is in finding these types of defects via various methods.

October 8, 2007 at 10:11 PM
Anonymous said...
This comment has been removed by a blog administrator.
October 15, 2007 at 8:14 PM
Frances said...

I hate GMail. GMail is the Biggest Spammer of all. I have had nothing but trouble with Gmail and I intend to get rid of Gmail.

November 3, 2007 at 10:10 PM
Ron said...
This comment has been removed by a blog administrator.
March 23, 2008 at 7:25 AM
Yash said...

As someone said earlier; it would be great to know how Google works on auditing its projects. Possibly even releasing or demonstrating some tools.

Google has some of the best resources and talent; it could do great things for the Security Community.

On a side-note: Gmail is definitely the best mail service I've used. In regards to spam; I went from 40-50 spam mails a day to 0 after forwarding my mail through Gmail.

--
Yash Kadakia
CTO, Security Brigade
http://www.securitybrigade.com
Penetration Testing, PCI DSS Compliance, Security Consulting etc.

April 20, 2008 at 2:10 PM
reddog said...
This comment has been removed by a blog administrator.
August 29, 2008 at 7:38 PM

Post a Comment

  

Labels


  • android
  • android security
  • big data
  • blackhat
  • spyware
  • targeted spyware


Archive


  •     2019
    • Feb
    • Jan
  •     2018
    • Dec
    • Nov
    • Oct
    • Sep
    • Aug
    • Jul
    • Jun
    • May
    • Apr
    • Mar
    • Feb
    • Jan
  •     2017
    • Dec
    • Nov
    • Oct
    • Sep
    • Jul
    • Jun
    • May
    • Apr
    • Mar
    • Feb
    • Jan
  •     2016
    • Dec
    • Nov
    • Oct
    • Sep
    • Aug
    • Jul
    • Jun
    • May
    • Apr
    • Mar
    • Feb
    • Jan
  •     2015
    • Dec
    • Nov
    • Oct
    • Sep
    • Aug
    • Jul
    • Jun
    • May
    • Apr
    • Mar
    • Feb
    • Jan
  •     2014
    • Dec
    • Nov
    • Oct
    • Sep
    • Aug
    • Jul
    • Jun
    • Apr
    • Mar
    • Feb
    • Jan
  •     2013
    • Dec
    • Nov
    • Oct
    • Aug
    • Jun
    • May
    • Apr
    • Mar
    • Feb
    • Jan
  •     2012
    • Dec
    • Sep
    • Aug
    • Jun
    • May
    • Apr
    • Mar
    • Feb
    • Jan
  •     2011
    • Dec
    • Nov
    • Oct
    • Sep
    • Aug
    • Jul
    • Jun
    • May
    • Apr
    • Mar
    • Feb
  •     2010
    • Nov
    • Oct
    • Sep
    • Aug
    • Jul
    • May
    • Apr
    • Mar
  •     2009
    • Nov
    • Oct
    • Aug
    • Jul
    • Jun
    • Mar
  •     2008
    • Dec
    • Nov
    • Oct
    • Aug
    • Jul
    • May
    • Feb
  •     2007
    • Nov
    • Oct
    • Sep
    • Jul
    • Jun
    • May

Feed

Googleon Google+
Follow
Give us feedback in our Product Forums.

Company-wide

  • Official Google Blog
  • Public Policy Blog
  • Student Blog

Products

  • Android Blog
  • Chrome Blog
  • Lat Long Blog

Developers

  • Developers Blog
  • Ads Developer Blog
  • Android Developers Blog
  • Google
  • Privacy
  • Terms