andymeneely
commented
2 years ago Idea: SQLite
Open andymeneely opened 2 years ago
andymeneely
commented
2 years ago Idea: SQLite
andymeneely
commented
1 year ago Microsoft's .NET CORE framework
TrevBid
commented
1 year ago Firefox
| Answer | Criterion | Reasoning |
|---|---|---|
| Yes | Recognizable | Popular web browser |
| Yes | Enough vulns | 2513 according to CVEDetails |
| No | Traceability | I haven't seen much linkages between Git commits and the CVEs |
| Yes | Easy updates | TBD |
| No | Manageable | Very large repo |
| Yes | Acknowledge | https://www.mozilla.org/en-US/security/ |
| Yes | Understandable | Very large repo, it's understandable but can be challenging to put things together |
| Yes | Famous vuln | CVE-2022-26485 and CVE-2022-26486 |
TrevBid
commented
1 year ago GZIP
| Answer | Criterion | Reasoning |
|---|---|---|
| Yes | Recognizable | Was once a very popular archiving tool |
| No | Enough vulns | 10 according to CVEDetails |
| ❔ | Traceability | TBD |
| ❔ | Easy updates | TBD |
| ❔ | Manageable | TBD |
| ❔ | Acknowledge | TBD |
| ❔ | Understandable | TBD |
| ❔ | Famous vuln | TBD |
Stopped research after finding that there's not enough vulns
TrevBid
commented
1 year ago binutils
| Answer | Criterion | Reasoning |
|---|---|---|
| No | Recognizable | Relatively speaking to the other projects, its probably not as known unless you're a developer |
| Yes | Enough vulns | 199 according to CVEDetails, but they may not be many interesting ones since the sample size is small |
| Yes | Traceability | From observance, the person putting in the fixing commit will comment the link to it. But it is up to the person to do so. |
| Yes | Easy updates | Everything is tracked on sourceware.org or Bugzilla |
| Yes | Manageable | Git clone source rep |
| Yes | Acknowledge | The discussions are open and available |
| Yes | Understandable | N/A |
| No | Famous vuln | N/A |
Let's use this issue to track our ideas for "next case studies".
For each case study idea that someone has proposed, answer the following and check off as appropriate.
Answers: ✅ ❌ ❔
Template:
OpenSSL
OpenJDK
PHP
Wireshark
ImageMagick
Log4j
Firefox
MySQL
PostgreSQL
Git
GitLab
cURL and libcurl
flask
libpng
linux kernel
openssh
node.js
numpy
opencv
rust
gzip
wordpress
tensorflow
glibc
bash
binutils
libxml2