Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.programming > #6008

Re: finding backdoors and security holes

Show all headers | View raw

"Öö Tiib" wrote:

> On Thursday, 3 December 2015 03:59:38 UTC+2, G G  wrote:
>> How are these guys (generic) find these backdoors and security holes?
>
> They search for those.
>
>>
>> Some of the code they are looking at has to be 100s of thousands
>> line of code.
>>
>> In the case of Arris's backdoor, what, how?
>
> It was likely deliberately made by author of modem software
> for testing and debugging purposes and then forgotten to remove
> from production software.
>
>>
>> Any really good books on the subject matter?
>
> There are plenty of books about how to prevent attacks and to reduce
> risks of security vulnerabilities. These books teach how to look for
> those.

To the OP:
Perhaps if you would limit your question to backdoors you might start 
getting useful answers. You gave a sneak path by mentioning security 
issues - it's kind of like electricity, it takes the easiest path.

I only have guesses, my guess is that an awful lot of stars have to align to 
find a backdoor. 

Back to comp.programming | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

finding backdoors and security holes G G <gdotone@gmail.com> - 2015-12-02 17:59 -0800
  Re: finding backdoors and security holes Robert Wessel <robertwessel2@yahoo.com> - 2015-12-03 01:58 -0600
  Re: finding backdoors and security holes Richard Heathfield <rjh@cpax.org.uk> - 2015-12-03 11:04 +0000
    Re: finding backdoors and security holes "Osmium" <r124c4u102@comcast.net> - 2015-12-09 09:22 -0600
      Re: finding backdoors and security holes Richard Heathfield <rjh@cpax.org.uk> - 2015-12-09 15:58 +0000
      Re: finding backdoors and security holes "J. Clarke" <j.clarke.873638@gmail.com> - 2015-12-13 22:59 -0500
  Re: finding backdoors and security holes Öö Tiib <ootiib@hot.ee> - 2015-12-03 05:42 -0800
    Re: finding backdoors and security holes "Osmium" <r124c4u102@comcast.net> - 2015-12-03 08:12 -0600
      Re: finding backdoors and security holes G G <gdotone@gmail.com> - 2015-12-03 06:55 -0800
        Re: finding backdoors and security holes "Osmium" <r124c4u102@comcast.net> - 2015-12-03 09:48 -0600
          Re: finding backdoors and security holes Öö Tiib <ootiib@hot.ee> - 2015-12-03 10:01 -0800
  Re: finding backdoors and security holes Victor Porton <porton@narod.ru> - 2015-12-03 20:49 +0200
    Re: finding backdoors and security holes G G <gdotone@gmail.com> - 2015-12-04 15:56 -0800

csiph-web