Re: Israeli Software Company Faces U.S. Probe

[James Kehl <shykta () dione ids pl>]

On Sun, 5 Mar 2006, Aviram Jenik wrote:

> When CheckPoint did a common criteria evaluation, one of the issues found was
> several hardcoded IP addresses that showed up in the binary. Those were all

One question: given that an IPv4 address is a 32-bit value, and pretty
much any set of four bytes can make up a valid IP address, how could you
spot hardcoded IP addresses in a binary?

(What sort of lazy backdoor-writer uses inet_aton, instead of a plain
integer, or better still, code used as data??!)

James
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.