Code Challenge - Find the Security Bug!

Everyone agrees that open source software is essential. It's free, often with no-cost community support. But it's not "free" of responsibility, especially considering potential security problems. Following up on his video "The 3 A's of Open Source Security", Sahdev Zala challenges Dan Kehn to find-the-bug in three code examples. Sahdev created these examples inspired by the public CVEs on the etcd open source project, where he is one of the project maintainers. You can play along too!

#AI #Software #DanKehn #Code #DataSecurity #lightboard #IBM #quiz

[IBMTechnology]

Can you spot the security bugs?

QUIZ 1
package main

import (
"fmt"
"log"
)

func main() {
var passwd string
fmt.Println("Please enter password:")
_, err := fmt.Scan(&passwd)
if err != nil {
log.Println(err)
return
}
savePassword(passwd)
}

QUIZ 2
package main

import (
"fmt"
"log"
"os"
)

func main() {
var dirPath = "/Users/dan/quiz"
err := os.MkdirAll(dirPath, 0700)
if err != nil {
log.Println(err)
return
}
fmt.Println("Dir created successfully.")
return
}

QUIZ 3
package main

import (
"fmt"
"log"
"time"
)

func main() {
var reminder time.Duration
var total int
fmt.Println("Enter reminder time in minutes and # of reminders:")
_, err := fmt.Scan(&reminder, &total)
if err != nil {
log.Println(err)
return
}
for i:=0; i < total; i++ {
time.Sleep(reminder * time.Minute)
fmt.Println("Here is a reminder to you.")
log.Println("Reminder sent to user.")
}
}

[lawyermahaprasad]

can you please make a video, how are you producing these videos, I am sure theres some amazing tricks and process you guys are using

[i_am_dumb]

Please start a series of these video it was really helpful ❤

[Hiram]

As a non programmer, I found this very interesting. I didn't get any correct... haha

[alexandre]

Thanks guys. What do you thing about the double authentification?

[Flankymanga]

guys nice video but the volume is too low... could you please increase the volume next time? Thank you!