Microsoft Unveils Open Source Exploit Finder

Houston 2600 sends this excerpt from the Register about an open-source security assessment tool Microsoft presented at CanSecWest: "Microsoft on Friday released an open-source program designed to streamline the labor-intensive process of identifying security vulnerabilities in software while it's still under development. As its name suggests, !exploitable Crash Analyzer (pronounced 'bang exploitable crash analyzer') combs through bugs that cause a program to seize up, and assesses the likelihood of them being exploited by attackers. Dan Kaminsky, a well-known security expert who also provides consulting services to Microsoft, hailed the release a 'game changer' because it provides a reliable way for developers to sort through thousands of bugs to identify the several dozen that pose the greatest risk."

Comments

Bang exploitable

[Anonymous Coward]

!exploitable Crash Analyzer (pronounced 'bang exploitable crash analyzer')

LOL

Damn you microsoft! For the next few months I won't be able to read the "not" operator without giggling.

Re:Bang exploitable

[NeverVotedBush]

I think this might explain some of Microsoft's buggy code issues.

Every time they see "!=" they interpret is as "bang equals". That sounds like definitely equals, doesn't it? Like, dude, those are so equal it's not even funny, equal.

No wonder they have all those buffer overflow exploits. Their logic checks that include the not modifier are all wrong.

Re:Bang exploitable

[Anonymous Coward]

Bang Exploitable Crash Analyzer, programmed in C Pound Point Net.

Open Source?! Wait for it...

[Macthorpe]

'hellfrozeover' tag in 3... 2... 1...

I'm feeling quite dizzy...

[Anonymous Coward]

Microsoft has released an open source product that detects security flaws in code... my irony detector just exploded. :)

Re:I'm feeling quite dizzy...

[mail2345]

Which just causes the finder to crash.

Things that make you go hmmm...

[Anonymous Coward]

Could Microsoft be purposely trying to confuse people and associate the terms "open source" and exploits?

It's nice to see...

[rlanctot]

Microsoft releasing their internal tools finally. I myself am waiting for their '!MakePortedAppsSuck' and '!CrushAllResistance' apps with baited breath...

Re:It's nice to see...

[Quothz]

with baited breath...

Speaking of Microsoft and security, I think you've picked up a worm.

Re:It's nice to see...

[TheRaven64]

And the fact that they start the executable name with an exclamation mark shows us why Windows is so buggy; they secretly all use RiscOS internally and only pretend to eat their own dogfood.

Re:auto-hack or brute force?

[Anonymous Coward]

They also don't say they've run any of it on Microsoft products or standards before...

Quite a few(think SMB) could have used a bit of fuzz-testing before the ink dried.

pronounced 'bang exploitable crash analyzer'

[c.derby]

...or as i prefer to call it, "bang beca."

interesting excerpt from bang source code

[Anonymous Coward]

int assess_severity( struct* bug )
{
    string vendor = get_application_vendor( bug );
    if ((vendor == "Google") ||
        (vendor == "Adobe") ||
        (vendor == "Mozilla"))
          return MAJOR_RISK_UNINSTALL_IMMEDIATELY;
    else if (vendor == "Microsoft")
          return TRIVIAL_SECURITY_RISK;
    else
          return MODERATE_SECURITY_RISK;
}

Re:interesting excerpt from bang source code

[mach1980]

The funny thing is that the function is violating at least two MISRA C rules and don't even check for null-pointer argument :)

Sorry if I come across as an asshole. I'm currently working to raise the code quality at my company and see similar code every day. It gives me the itch...

Re:really?

[Anonymous Coward]

Are you sure, Coward?

Please, no need for the formality. You can call me Anonymous...

Rules of Open Source club

[CarpetShark]

1. Fork the project
2. Change the name

Re:There's already proof that this can't work

[Paradise Pete]

And just like anti-virus software, it will lull people into a false sense of security that can easily result in catastrophe

Exactly. That's why I'm also against railroad crossing gates, smoke detectors, and those silly "Bridge Out" warning signs.

Here is the code

[fireman sam]

#include <stdlib.h>
#include <stdio.h>
int main(int argc, char *argv[])
{
#ifdef WIN32
    fprintf(stderr, "Your system is not secure\n");
#else
    fprintf(stderr, "Your system is not popular enough to be targetted, therefore it is secure\n");
#endif

    return 0;
}

Microsoft Unveils Open Source Exploit Finder?

[Jeremiah Cornelius]

What! You mean they Open Sourced Windows!??!