Microsoft Browser Bug Catchers Share Their SecretsPRNewswire Two of the noted cyber-sleuths who this week uncovered serious security flaws in Microsoft's Internet Explorer Web browser, MIT's Chris Rioux and University of Maryland's David Ross, offered some sound advice to aspiring bug catchers in an interview posted on CMP's TechWire™ (http://www.techwire.com/). "Bug detectives should note that larger programs have more (and more significant) flaws," Rioux told TechWire. "With size and complexity, comes errors and flaws. If an aspiring code-hacker wanted to find a bug in a particular piece of software, I suggest starting with large programs with a wide range of functionality. They offer the greatest potential for problems." Ross advised that, upon finding any flaws, bug catchers should "1) Notify the manufacturer of the product where the bug can be found before notifying anyone else. 2) Be responsible and ethical in every way." When asked if finding software flaws is a good way to get one's resume noticed by the Redmond, Wash. software giant, Rioux said, "I don't necessarily want to be employed by Microsoft, but my resume is on my Web page for the purpose of getting a job this summer. If they wanted to hire me to do security sweeps on their products, perhaps I'd do that." Also this weekend, TechWire features a comprehensive analysis of the browser flaws entitled "That Was The Buggy Week That Was." CMP's TechWire, part of CMP's TechWeb® super site, is an international technology news wire service that features news and features contributed by more than 300 technology journalists. TechWire was recently singled out in an article in the San Francisco Chronicle. "The site's international focus and investigative reporting make for some juicy reading that you won't find elsewhere on the Net," the Chronicle wrote. CMP's TechWeb is one of the Web's top ten publishers, according to Jupiter Communications' AdSpend report. Since its debut in 1994, the technology news and information super site has launched ten individual Web sites including File Mine™, TechInvestor™, TechPrice™, TechTools™, TechCalendar™, TechHelper™ and ActiveXpress™. CMP Media Inc. provides publishing, marketing and information services to the entire high-technology spectrum -- the builders, sellers and users of technology -- through print and electronic media. All of CMP's publications and online products can be accessed through the company's TechWeb site on the World Wide Web (http://www.techweb.com/). Print titles include EE Times, Computer Reseller News, InformationWeek and WINDOWS Magazine. NOTE: All CMP's press releases are available on the Web at http://techweb.cmp.com/corporate. Journalists and reporters may also set up interviews with CMP's high technology experts through the site by e-mail. -0- 3/08/97 SOURCE: CMP Media Inc. CONTACT: Steve Rubel, Corporate Communications Specialist of CMP Media, |