Rotten code, aging standards, & pwning IPv4 parsing across nearly every mainstream programming language

No ratings

Presented at DEF CON 29 by

Kelly Codes

Openness to responsibly disclosed external vulnerability research is crucial for modern software maintainers and security teams. Changes in upstream dependency code may have pulled the safety rug out from underneath widely trusted core libraries, leaving millions of services vulnerable to unsophisticated attacks. The impact of even a single reasonably well-distributed supply-chain security vulnerability will be felt by engineering teams across many applications, companies, and industries.