Archives
- ► 2012 (8)
- ► 2011 (157)
- ► 2010 (174)
- ► 2009 (12)
Which topics would you like us to cover more?
Latest comments
- How to reset you Kindle
3, eve...
Thanks for this article and the related "Inside th...
By H K - How to reset you Kindle
3, eve...
How do you drain power on the board? I dont have r...
By Grace - How to reset you Kindle
3, eve...
You're welcome!
By Bas - How to reset you Kindle
3, eve...
Thanks man....removing the battery worked like a c...
By DaveMan - nHapi
example
Hi Slypete, Thank you for your comment. This way w...
By Bas - nHapi
example
Hello, Employing .Net dynamics, one can implement ...
By slypete - Implementing MLLP in C#
Hi Mayura, I'm not sure I understand your question...
By Bas - Implementing MLLP in C#
I have used SSL stream to secure the MLLP transact...
By Mayura
Latest tweets
| Easter eggs and security |
| Written by Division by Zero |
| Sunday, 21 March 2010 11:36 |
|
Almost Easter. A good time to write something about Easter eggs and security. And no, I'm not talking about those painted eggs, but those funny pieces of functionality in software. You, if you are a developer, probably wrote some. I know I have. These Easter eggs are not done from a security perspective. I know, they are fun, but they aren't trustworthy. If an attacker tries to find holes in your software, she or he first just looks what the software does. The second step is to try to misuse working and good functionality. By entering and tampering data it is possible to let the software behave in an unintended way. This behavior is what you have build, but not have intended to happen (as most bugs). Luckily we have testers who test the functionality that we build. There Easter eggs come in. We add functionality in moments we are slacking off and goofing around. This functionality isn't listed in the software design. Therefore this functionality isn't tested. Therefore this functionality contains, very likely, bugs. Therefore this functionality is a possible security leak. Yes... slacking off and goofing around with code is fun and helps productivity. But just never put this code in a production application. Tags:
|
I'm feeling so happy today. I think I'll call in sick. - Loesje




