4 ms·
I was just thinking the other day that searching for TODO is probably a very good way to search a project for potential bugs or security issues. E.g; I see a bu
by AJRF 5y ago
I was just thinking the other day that searching for TODO is probably a very good way to search a project for potential bugs or security issues. E.g; I see a bunch of todos in Firebase iOS SDK that look kind of interesting to an attacker. Without looking into how the methods are called I can't say if they are actually exploitable (and I am sure Firebase is fuzzed to high-hell) but it was a little seed planted in my head.
- _kbh_ 5y agofor a great example of this just have a look at the following macOS privesc the source of which came with the handy comment "deal with OOB". https://blog.zecops.com/research/from-a-comment-to-a-cve-content-filter-strikes-again/ https://blog.zecops.com/research/from-a-comment-to-a-cve-con...
- lucb1e 5y agoAm security tester. Can confirm. Sometimes the vulnerabilities are just handed to you on a dark-themed platter and I don't look them in the mouth.