Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: "Osmium" Newsgroups: comp.programming Subject: Re: finding backdoors and security holes Date: Thu, 3 Dec 2015 08:12:56 -0600 Lines: 32 Message-ID: References: <6fd70338-1997-404e-a371-51577f91dbd3@googlegroups.com> <59fddfb5-6e30-4be1-ad62-4eacad1b7c2b@googlegroups.com> Mime-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 8bit X-Trace: individual.net 1w4/Dqdyu7yaJsQpwmk62wJa4VU3oyEWmTye+hSyQR3MZHvfsy Cancel-Lock: sha1:84vCNZh0A+RFM8bGbY6UGA8J2eg= X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2900.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Xref: csiph.com comp.programming:6008 "Öö Tiib" wrote: > On Thursday, 3 December 2015 03:59:38 UTC+2, G G wrote: >> How are these guys (generic) find these backdoors and security holes? > > They search for those. > >> >> Some of the code they are looking at has to be 100s of thousands >> line of code. >> >> In the case of Arris's backdoor, what, how? > > It was likely deliberately made by author of modem software > for testing and debugging purposes and then forgotten to remove > from production software. > >> >> Any really good books on the subject matter? > > There are plenty of books about how to prevent attacks and to reduce > risks of security vulnerabilities. These books teach how to look for > those. To the OP: Perhaps if you would limit your question to backdoors you might start getting useful answers. You gave a sneak path by mentioning security issues - it's kind of like electricity, it takes the easiest path. I only have guesses, my guess is that an awful lot of stars have to align to find a backdoor.