D. J. Bernstein
UNIX

MCS 494, UNIX Security Holes, Fall 2004

Week 1: 2004.08.23: slides. 2004.08.25: slides. 2004.08.27: slides.

Week 2: 2004.08.30: Gaim assignment, quiz, slides. 2004.09.01: slides. 2004.09.03: slides, some inspection of Gaim code.

Week 3: 2004.09.08: more inspection of Gaim code. 2004.09.10: more inspection of Gaim code; slides.

Week 4: 2004.09.13: slides. 2004.09.15: slides. 2004.09.17: libpng assignment, slides, some sourceforge browsing, initial inspection of latex2rtf code.

Week 5: 2004.09.20: slides, continued inspection of latex2rtf code. 2004.09.22: continued inspection of latex2rtf code. 2004.09.24: slides, continued inspection of latex2rtf code.

Week 6: 2004.09.27: continued inspection of latex2rtf code and construction of an attack. 2004.09.29: slides; watching latex2rtf run attacker-provided payload to remove a file. 2004.10.01: slides. Data: my first attack on this buffer overflow; the somewhat fragile attack constructed in class.

Week 7: 2004.10.04: slides. 2004.10.06: midterm 1. 2004.10.08: slides; examples of using gdb.

Week 8: 2004.10.11: slides. 2004.10.13: slides. 2004.10.15: slides.

Week 9: 2004.10.18: slides. 2004.10.20: inspection of Zalewski's browser-crashing code; slides. 2004.10.22: slides.

Week 10: 2004.10.25: slides. 2004.10.27: slides. 2004.10.29: slides.

Week 11: 2004.11.01. 2004.11.03: slides. 2004.11.05: slides.

Week 12: 2004.11.08: slides. 2004.11.10: slides. 2004.11.12: slides.

Week 13: 2004.11.15: guest lecture by Robert Sloan. 2004.11.17: midterm 2. 2004.11.19: guest lecture by Jon Solworth.

Week 14: 2004.11.22: slides. 2004.11.24: slides.

Week 15: 2004.11.29: slides. 2004.12.01: slides. 2004.12.03: slides.

Week 16: 2004.12.09 08:00-10:00: final exam. (Problem 8 was easier than it should have been; I neglected to add various constraints prohibiting the easiest solutions.)