Code search helps find vulnerabilities
Date: October 17, 2006Source: securitypronews.com
By:
Google's newly launched Code Search is proving useful for finding website vulnerabilities, but also for locating potty-mouth coder insertions.
It seems Microsoft receives the brunt of the profanity, as frustrated (Apple) coders drop the f-bomb quite often in reference to Internet Explorer or Windows requirements.
But the naughtiest words of all are the easily accessed passwords, backdoor commands, and user information that can be found in open source code.
Some are seeing it as a good thing, as Google Code Search will force coders to be more secure. In the meantime, however, there is quite the concern that a lot of sites face an increase in vulnerability.
Add comment Email to a Friend