Security Blog

The latest news and insights from Google on security and safety on the Internet

Auditing open source software

8. Oktober 2007
Share on Twitter Share on Facebook
Google

Kommentare :

Andy Steingruebl hat gesagt…

Can you comment on how these defects were detected - code review (manual or automated), fuzz testing, other?

David Thiel's paper and talk from Blackhat this year talked about specific file fuzzers for media formats and such and the major lesson for me is that building file-specific fuzzers like that that subtly tweak file formats is laborious.

I'd be interested to know how you detected these, and what your experience is in finding these types of defects via various methods.

8. Oktober 2007 um 22:11
Anonym hat gesagt…
Der Kommentar wurde von einem Blog-Administrator entfernt.
15. Oktober 2007 um 20:14
Unknown hat gesagt…

I hate GMail. GMail is the Biggest Spammer of all. I have had nothing but trouble with Gmail and I intend to get rid of Gmail.

3. November 2007 um 22:10
Ron hat gesagt…
Der Kommentar wurde von einem Blog-Administrator entfernt.
23. März 2008 um 07:25
Yash Kadakia hat gesagt…

As someone said earlier; it would be great to know how Google works on auditing its projects. Possibly even releasing or demonstrating some tools.

Google has some of the best resources and talent; it could do great things for the Security Community.

On a side-note: Gmail is definitely the best mail service I've used. In regards to spam; I went from 40-50 spam mails a day to 0 after forwarding my mail through Gmail.

--
Yash Kadakia
CTO, Security Brigade
http://www.securitybrigade.com
Penetration Testing, PCI DSS Compliance, Security Consulting etc.

20. April 2008 um 14:10
Cyber Monday Deals hat gesagt…
Der Kommentar wurde von einem Blog-Administrator entfernt.
29. August 2008 um 19:38

Kommentar posten

  

Labels


  • android
  • android security
  • android tr
  • app security
  • big data
  • biometrics
  • blackhat
  • chrome
  • chrome security
  • federated learning
  • Gboard
  • google play
  • google play protect
  • pha family highlights
  • privacy
  • Security
  • spyware
  • targeted spyware
  • vulnerabilities


Archive


  •     2021
    • Jan
  •     2020
    • Dez
    • Nov
    • Okt
    • Sep
    • Aug
    • Jul
    • Jun
    • Mai
    • Apr
    • Mär
    • Feb
    • Jan
  •     2019
    • Dez
    • Nov
    • Okt
    • Sep
    • Aug
    • Jul
    • Jun
    • Mai
    • Apr
    • Mär
    • Feb
    • Jan
  •     2018
    • Dez
    • Nov
    • Okt
    • Sep
    • Aug
    • Jul
    • Jun
    • Mai
    • Apr
    • Mär
    • Feb
    • Jan
  •     2017
    • Dez
    • Nov
    • Okt
    • Sep
    • Jul
    • Jun
    • Mai
    • Apr
    • Mär
    • Feb
    • Jan
  •     2016
    • Dez
    • Nov
    • Okt
    • Sep
    • Aug
    • Jul
    • Jun
    • Mai
    • Apr
    • Mär
    • Feb
    • Jan
  •     2015
    • Dez
    • Nov
    • Okt
    • Sep
    • Aug
    • Jul
    • Jun
    • Mai
    • Apr
    • Mär
    • Feb
    • Jan
  •     2014
    • Dez
    • Nov
    • Okt
    • Sep
    • Aug
    • Jul
    • Jun
    • Apr
    • Mär
    • Feb
    • Jan
  •     2013
    • Dez
    • Nov
    • Okt
    • Aug
    • Jun
    • Mai
    • Apr
    • Mär
    • Feb
    • Jan
  •     2012
    • Dez
    • Sep
    • Aug
    • Jun
    • Mai
    • Apr
    • Mär
    • Feb
    • Jan
  •     2011
    • Dez
    • Nov
    • Okt
    • Sep
    • Aug
    • Jul
    • Jun
    • Mai
    • Apr
    • Mär
    • Feb
  •     2010
    • Nov
    • Okt
    • Sep
    • Aug
    • Jul
    • Mai
    • Apr
    • Mär
  •     2009
    • Nov
    • Okt
    • Aug
    • Jul
    • Jun
    • Mär
  •     2008
    • Dez
    • Nov
    • Okt
    • Aug
    • Jul
    • Mai
    • Feb
  •     2007
    • Nov
    • Okt
    • Sep
    • Jul
    • Jun
    • Mai

Feed

Follow
Give us feedback in our Product Forums.
  • Google
  • Privacy
  • Terms