DEF CON 29 - Kelly Kaoudis, Sick Codes - Rotten code, aging standards, & pwning IPv4 parsing
Openness to responsibly disclosed external vulnerability research is crucial for modern software maintainers and security teams. Changes in upstream dependency code may have pulled the safety rug out from underneath widely trusted core libraries, leaving millions of services vulnerable to unsophisticated attacks. The impact of even a single reasonably well-distributed supply-chain security vulnerability will be felt by engineering teams across many applications, companies, and industries.
We’d like to discuss an IP address parsing vulnerability first discovered in private-ip, a small and infrequently maintained yet critically important NodeJS package for determining if an IP address should be considered part of a private range or not. We’ll talk about not only the implications of this CVE but taking the main idea and applying it across multiple programming languages in uniquely disturbing ways.
Sometimes, the effects of code rot are even more far-reaching than we could possibly expect, and if you pull on a
1 view
1379
422
2 months ago 00:00:00 1
Resonancerz - Let The Galaxy Burn
2 months ago 00:03:09 1
Jay Z - 99 Problems OFFICIAL VIDEO
2 months ago 00:00:00 1
Classic Rock Songs 70s 80s 90s Full Album - Queen, Eagles, Pink Floyd, Def Leppard, Bon Jovi
2 months ago 00:00:00 1
Top 100 Classic Rock Songs Of All Time - ACDC, Pink Floyd, Eagles, Queen, Def Leppard, Bon Jovi
2 months ago 00:01:29 1
Peaceful 31
2 months ago 00:04:54 1
Los Borbones son unos Ladrones VIDEOCLIP + LETRA
2 months ago 01:14:27 1
[Angels Of Love] Dave Morales ’’Revoluciòn’’ live @ Disco Metropolis 31-08-2002
2 months ago 00:03:19 8
NOELIA RODILES & FERNANDO ARIAS en FILARMÓNICA DE ZARAGOZA. Letanía D 343 de
2 months ago 00:46:42 1
ЛУЧШИЕ ИГРЫ про ХОЛОДНУЮ ВОЙНУ
2 months ago 00:35:15 1
The Absolute Craziest Mind Blowing Knives / Stuff at a Knife Show
2 months ago 01:04:33 2
Danny Eaton Guestmix
2 months ago 00:22:46 1
PREPARE YOUR FAMILY FOR A FULL SCALE EVACUATION OF THE URBAN AREAS BEFORE SHTF!
3 months ago 00:42:23 1
⚡ALERT: WW3 GROUND WAR BEGINS! US SENDS TROOPS! KREMLIN/ IRAN EMERGENCY! PUTIN GOES DEFCON 2!
3 months ago 00:02:22 1
Les manifestations après le décès de Philippine
3 months ago 00:44:06 1
DEF CON 25 - Chris Sumner - Rage Against the Weaponized AI Propaganda Machine
3 months ago 00:04:38 1
VIEUX CON !
3 months ago 00:00:00 1
Mamy Samb et Ngoné à Bougane “nagn ko barricadé nakh mou bagna guénati def conférence presse“
3 months ago 00:04:02 1
Resonancerz - Power Of Harmony
3 months ago 00:15:23 1
Russian short film – “Defcon“ (2009)
3 months ago 00:08:22 1
“Rusia entraría en DEFCON4 si Zelensky usa los misiles de largo alcance de EEUU”. Villaroya
3 months ago 01:33:23 1
Cyber Risk Thursday: Internet of Bodies
3 months ago 02:03:39 1
Ori Uplift - Uplifting Only 422 (March 11, 2021) [All Instrumental]
3 months ago 00:04:25 1
Resonancerz - Sigmar Lied
3 months ago 00:00:00 1
ACDC, Pink Floyd, Eagles, Queen, Def Leppard, Bon Jovi, U2 Power Ballads | Classic Rock Songs