A guessing technique that leverages a design flaw in the popular 1Password password manager tool has sparked widespread discussion about potential security consequences and appropriate approaches to encryption implementation. Cryptography experts have suggested that the actual danger is minimal but that the incident underscores the need for careful code review and better hashing functions
Read More »
Open source software projects have long been celebrated for their role in driving innovation, their low cost to users, their potential for customization and more. At the same time, many people remain skeptical of the security of such projects, assuming that the total accessibility of the code makes it easier for attackers to find weaknesses or even actively implant malicious changes to the code base themselves
Read More »
A technique such as peer code review or even collaborative, paired coding can be an effective way to meet goals that are qualitative rather than quantitative
Read More »
Approaches such as peer code review and static analysis software are generally focused on spotting and fixing unexpected or preventable flaws in the development process, but not every software security issue is necessarily the result of poorly executed design or oversight. Internal stakeholders have been known, on occasion, to sabotage programs in ways that either knowingly expose them to outside attackers or directly undermine relevant systems
Read More »
A steady stream of Java zero-days has kept the software at the center of security discussions in recent months, and experts suggested that these issues are likely to continue until a thorough code review has been performed
Read More »
As computer-driven data analysis has expanded the capabilities of scientific research, the practice has also increased the complexity of peer review for academic journals and raised questions about the quality of scientists' code
Read More »
Every second counts in the event of an emergency
Read More »
A series of recent market glitches has raised questions about the increasingly common practice of algorithmic trading
Read More »
As the kind of buyers who choose to adopt a plug-in hybrid car, Chevrolet Volt owners may be more enthusiastic about the future of automotive technology than most
Read More »
At a recent Security and Exchange Commission (SEC) Technology Roundtable, participants discussed the necessity of having in place more rigorous peer code review for software used in trading and other financial transactions, MNI News reported
Read More »
