4 ms·
On the topic of Google finding issues in others' software: I am wondering how do the engineers at Google that work on finding software issues or vulnerabilitie
by kovek 9y ago
On the topic of Google finding issues in others' software:
I am wondering how do the engineers at Google that work on finding software issues or vulnerabilities approach that kind of work? Is there a way to heuristically find security vulnerabilities and software issues?
Edit: Especially when those vulnerabilities need so much work to be revealed, like the meltdown/spectre issues we heard about recently
- forgot-my-pw 9y agoRead a lot of security papers, test commonly known vulnerabilities and techniques, etc. Here's the backstory on Meltdown specifically: https://www.bloomberg.com/news/articles/2018-01-17/how-a-22-year-old-discovered-the-worst-chip-flaws-in-history https://www.bloomberg.com/news/articles/2018-01-17/how-a-22-...