Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.programming > #6008

Re: finding backdoors and security holes

Path csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From "Osmium" <r124c4u102@comcast.net>
Newsgroups comp.programming
Subject Re: finding backdoors and security holes
Date Thu, 3 Dec 2015 08:12:56 -0600
Lines 32
Message-ID <dcb0v8Fpe7lU1@mid.individual.net> (permalink)
References <6fd70338-1997-404e-a371-51577f91dbd3@googlegroups.com> <59fddfb5-6e30-4be1-ad62-4eacad1b7c2b@googlegroups.com>
Mime-Version 1.0
Content-Type text/plain; format=flowed; charset="iso-8859-1"; reply-type=original
Content-Transfer-Encoding 8bit
X-Trace individual.net 1w4/Dqdyu7yaJsQpwmk62wJa4VU3oyEWmTye+hSyQR3MZHvfsy
Cancel-Lock sha1:84vCNZh0A+RFM8bGbY6UGA8J2eg=
X-Priority 3
X-MSMail-Priority Normal
X-Newsreader Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE Produced By Microsoft MimeOLE V6.00.2900.2180
Xref csiph.com comp.programming:6008

Show key headers only | View raw


"Öö Tiib" wrote:

> On Thursday, 3 December 2015 03:59:38 UTC+2, G G  wrote:
>> How are these guys (generic) find these backdoors and security holes?
>
> They search for those.
>
>>
>> Some of the code they are looking at has to be 100s of thousands
>> line of code.
>>
>> In the case of Arris's backdoor, what, how?
>
> It was likely deliberately made by author of modem software
> for testing and debugging purposes and then forgotten to remove
> from production software.
>
>>
>> Any really good books on the subject matter?
>
> There are plenty of books about how to prevent attacks and to reduce
> risks of security vulnerabilities. These books teach how to look for
> those.

To the OP:
Perhaps if you would limit your question to backdoors you might start 
getting useful answers. You gave a sneak path by mentioning security 
issues - it's kind of like electricity, it takes the easiest path.

I only have guesses, my guess is that an awful lot of stars have to align to 
find a backdoor. 

Back to comp.programming | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

finding backdoors and security holes G G <gdotone@gmail.com> - 2015-12-02 17:59 -0800
  Re: finding backdoors and security holes Robert Wessel <robertwessel2@yahoo.com> - 2015-12-03 01:58 -0600
  Re: finding backdoors and security holes Richard Heathfield <rjh@cpax.org.uk> - 2015-12-03 11:04 +0000
    Re: finding backdoors and security holes "Osmium" <r124c4u102@comcast.net> - 2015-12-09 09:22 -0600
      Re: finding backdoors and security holes Richard Heathfield <rjh@cpax.org.uk> - 2015-12-09 15:58 +0000
      Re: finding backdoors and security holes "J. Clarke" <j.clarke.873638@gmail.com> - 2015-12-13 22:59 -0500
  Re: finding backdoors and security holes Öö Tiib <ootiib@hot.ee> - 2015-12-03 05:42 -0800
    Re: finding backdoors and security holes "Osmium" <r124c4u102@comcast.net> - 2015-12-03 08:12 -0600
      Re: finding backdoors and security holes G G <gdotone@gmail.com> - 2015-12-03 06:55 -0800
        Re: finding backdoors and security holes "Osmium" <r124c4u102@comcast.net> - 2015-12-03 09:48 -0600
          Re: finding backdoors and security holes Öö Tiib <ootiib@hot.ee> - 2015-12-03 10:01 -0800
  Re: finding backdoors and security holes Victor Porton <porton@narod.ru> - 2015-12-03 20:49 +0200
    Re: finding backdoors and security holes G G <gdotone@gmail.com> - 2015-12-04 15:56 -0800

csiph-web