Back to Vendor Listings

MIT Researchers Uncover Security Flaws in C and C++ Software

MIT researchers have produced a new paper that uncovers security flaws in C and C++ software, generated by compiler optimizations that discard ambiguous code or code, which produce undefined behavior. Some of that code includes security-relevant checks and the paper includes examples of null pointer checks and pointer overflow checks that the GCC compiler optimizes away, leaving…

Wormiversary!

November 2, 2013 is the 25th anniversary of the Morris Worm. In the intervening years, we have not solved the problems of buffer overflows, reusable single-factor credentials, peer-to-peer trust or password reuse. What then have we learned from this incident? 1. Access to some files should be restricted. No more world-readable password files. Shadow files in…