You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
101 lines
3.8 KiB
101 lines
3.8 KiB
<!DOCTYPE html> |
|
<html lang="en"> |
|
<head> |
|
<meta http-equiv="X-UA-Compatible" content="IE=edge"> |
|
<meta http-equiv="content-type" content="text/html; charset=utf-8"> |
|
|
|
<!-- Enable responsiveness on mobile devices--> |
|
<!-- viewport-fit=cover is to support iPhone X rounded corners and notch in landscape--> |
|
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1, viewport-fit=cover"> |
|
|
|
<title>Julio Biason .Me 4.3</title> |
|
|
|
<!-- CSS --> |
|
<link rel="stylesheet" href="https://blog.juliobiason.me/print.css" media="print"> |
|
<link rel="stylesheet" href="https://blog.juliobiason.me/poole.css"> |
|
<link rel="stylesheet" href="https://blog.juliobiason.me/hyde.css"> |
|
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=PT+Sans:400,400italic,700|Abril+Fatface"> |
|
|
|
|
|
|
|
|
|
|
|
</head> |
|
|
|
<body class=" "> |
|
|
|
<div class="sidebar"> |
|
<div class="container sidebar-sticky"> |
|
<div class="sidebar-about"> |
|
|
|
<a href="https://blog.juliobiason.me"><h1>Julio Biason .Me 4.3</h1></a> |
|
|
|
<p class="lead">Old school dev living in a 2.0 dev world</p> |
|
|
|
|
|
</div> |
|
|
|
<ul class="sidebar-nav"> |
|
|
|
|
|
<li class="sidebar-nav-item"><a href="/">English</a></li> |
|
|
|
<li class="sidebar-nav-item"><a href="/pt">Português</a></li> |
|
|
|
<li class="sidebar-nav-item"><a href="/tags">Tags (EN)</a></li> |
|
|
|
<li class="sidebar-nav-item"><a href="/pt/tags">Tags (PT)</a></li> |
|
|
|
|
|
</ul> |
|
</div> |
|
</div> |
|
|
|
|
|
<div class="content container"> |
|
|
|
<div class="post"> |
|
<h1 class="post-title">A Bug Hunter's Diary: A Guided Tour Through the Wilds of Software Security - Tobias Klein</h1> |
|
<span class="post-date"> |
|
2016-10-14 |
|
|
|
<a href="https://blog.juliobiason.me/tags/books/">#books</a> |
|
|
|
<a href="https://blog.juliobiason.me/tags/tobias-klein/">#tobias klein</a> |
|
|
|
<a href="https://blog.juliobiason.me/tags/reviews/">#reviews</a> |
|
|
|
<a href="https://blog.juliobiason.me/tags/it/">#it</a> |
|
|
|
<a href="https://blog.juliobiason.me/tags/stars-4/">#stars:4</a> |
|
|
|
<a href="https://blog.juliobiason.me/tags/published-2011/">#published:2011</a> |
|
|
|
</span> |
|
<p><a href="https://www.goodreads.com/book/show/12746081-a-bug-hunter-s-diary">GoodReads Summary</a>: |
|
Seemingly simple bugs can have drastic consequences, allowing attackers to |
|
compromise systems, escalate local privileges, and otherwise wreak havoc on a |
|
system.</p> |
|
<span id="continue-reading"></span><div> |
|
★★★★☆ |
|
</div> |
|
<p>For a long time you keep hearing things like "don't use this 'cause it can be |
|
exploited", but you really never saw something like that being exploited. And |
|
then comes this book and shows how someone can use everything you know you |
|
can't use to actually call something it wasn't expected to be called. </p> |
|
<p>Confusing? Well, it's a very complex issue that involves the call stack and |
|
assembly and registers and all that. But the book goes into length explaining |
|
and showing those things (so, yeah, some knowledge of assembly is required). </p> |
|
<p>In the end, it's a good book about those "things" you know your shouldn't use, |
|
and what happens when you actually use them. </p> |
|
|
|
</div> |
|
|
|
|
|
|
|
|
|
</div> |
|
|
|
</body> |
|
|
|
</html>
|
|
|