Defect another world

Chapter 16 The Perfect Counterattack Storm

Liu Gang even thought: "Could it be that he found a loophole and secretly downloaded the code of the development team?"

If so, he would have no hesitation in coming out to the whole company to accuse the vulnerability team of stealing their development results, and demanded that the company fire this person under the threat of resignation!

"The occurrence of this problem is related to the input string, which is very random."

Meng Fei ignored the shock of everyone present, his eyes flashed with strange confidence, and he said while operating:

"But I found a combination that reproduces the problem [-] percent of the time."

He entered the same sentence again, and sure enough, the input method got stuck again.

"Now I'll try to fix it."

After speaking, he opened the program directory "Program files" under the system, and then found the directory "MantisSoft" of Mantis Software.

Next is the intranet security "IntranetSecurity", he found a file "Misnetgate.dll".

Mantis Software Intranet Security Gate, this is a dynamic library, it is undoubtedly the product of Liu Gang and his group.

Open the file, a large piece of dense binary code.This is not source code, it is machine code.

In human eyes, this is a bunch of meaningless numbers.

Programmers can understand machine code.But it takes thousands of pages of instruction manuals, one instruction after another to check.

Can someone memorize the machine code for all instructions?Maybe there is such a perversion, but in this conference room, there is definitely not!
Besides, it is useless to remember.Instructions are just instructions, and they are nothing if they are separated from the specific execution logic and environment.

The final executable code compiled by Liu Gang and the others has undergone various obfuscation and virtualization, which is dazzling to the point of death to prevent it from being cracked.

Even if you Meng Fei know there is a bug, can you find the correct modification point?
However, just under his skeptical gaze, Meng Fei first backed up the files, then clicked the mouse and keyboard to modify several strings of numbers.

Can he read machine code?
Of course not!

But he has the strongest bug system.The program got into his eyes, and it didn't take much effort for him to scan the bug.

As for modifying the machine code, he can just change some bytes.

Does he want to change things badly?
What's wrong with changing it?Let the system repair in an instant.

There are so many people watching, so no one can find it strange?
Of course not.

What everyone sees is a bunch of numbers, and you are quick to operate, who can see what you have changed.

Save and restart the computer.Open it again and enter the same sentence.

Very smooth, no lag!
Meng Fei restored the backup file that was kept before the modification, restarted the system, and entered the same sentence again.

Sure enough, it's stuck again!
Modification, testing, problem solving.

Restored, tested, and the problem reappeared.

Iron-like evidence, no doubt about it.

Roan, who was used to seeing too many big scenes, did not have much shock on his face, but his admiration and satisfaction for Meng Fei was obvious.

And Liu Gang was so anxious that his face almost crooked.

He has completely lost this.

No matter how serious the problem is, whether it's a bug, or whether the vulnerability team raised it or not, and whether they rejected the change.

Their problems caused users to complain, and when they were demoed on the spot in front of the big boss, he was completely defeated.

But Luo An did not let it go, and continued to ask Meng Fei:
"You said you mentioned this bug, but the development team refused to fix it?"

Meng Fei clicked the mouse, and he actually found an old email from four months ago.

Even Ouyang Cong admired it.With such a big time span, how did you figure it out and counterattack it all together?
Of course he didn't know that, from scanning for bugs, to finding user complaints, and finding emails that they submitted bugs in advance, Meng Fei had already prepared the system for one-stop service.

"The rationale for this is actually quite simple.

"The intranet security system prevents programs from untrusted access to the extranet.

"And this input method will try to pop up ads when the user enters certain strings.

"Advertising comes from a variety of sources.

"Most of these source URLs have been added to the trust list, so it is not stuck at all when typing text.

"But there are very few ad source URLs that are not on the whitelist and are blocked by the intranet security system.

"Originally, if the connection is directly interrupted, the consequence is that there is no advertisement, and the input is still normal.

"But the way our security systems block is not by disconnecting, but by hanging."

Suspended means that it will not be processed for the time being and there is no reply.You don't know that this road will not work, you only know that there is no news ahead.Then the input method has nothing to do, and can only wait.

Stuck while waiting.It takes about a few seconds.

Usually other operation cards are acceptable for a few seconds.When you enter text, you get stuck, like stammering, and the user will feel uncomfortable.

"A few months ago, when we tested it and found that the way the security system blocked was to hang, so sent this email to the development team."

Meng Fei read out the content of the email: "The way to block the suspension will cause unpredictable freezes, which may affect the user experience. It is recommended to directly terminate the connection."

"But the development team didn't reply."

Meng Fei mercilessly nailed the last nail on the cover of the coffin.Silence.

In fact, Liu Gang is also very wrong.

It's just a matter of policy to suspend or interrupt.

If it hangs, the connection is still alive and the program will not die, which is theoretically more gentle than violent interruption.

You say that it should be interrupted now, so who knows if it will be more weird in other situations after changing it to interrupt?

The Vulnerability Group only needs to ask questions and suggest improvements.

However, whether this suggestion is feasible or not, it is not necessary and uncontrollable whether it will cause trouble if it is released.

Make modifications, and the final blame is not the development team itself?

Therefore, it is reasonable for their people not to reply directly to the email or to refuse to modify it with a reason.

But it's too late to say anything.Complaints from users and evidence from the scene are all in front of us.

The Vulnerability Group raised the issue four months ago, accurately predicting the possibility of users complaining, and they refused to fix it!

If he continues to struggle about whether to interrupt or suspend this kind of inexplicable topic, it will only make Roan feel that he has no responsibility and is unwilling to take responsibility.

"This is indeed our problem."

Liu Gang admitted with a sullen face.

"In the future, I will supervise the development team's follow-up on the bugs raised, and make sure that every problem is properly resolved."

Roan also nodded in appreciation:
"It's good to find the problem. Today's meeting is too long, so here it is. Liu Gang, please go back and write the minutes of the meeting and send out the specific improvement measures in the future."

Roan's style is like this, his emotions are indistinguishable.

He never directly criticized anyone in front of everyone.This will make the criticized person lose face and discourage their enthusiasm.

But the problems that should be solved must also be solved.Determination is useless, you must see concrete measures that can be implemented.

Just having measures is not enough. In the future, it will depend on whether the measures are implemented and what the results will be.

He will chase after you like a wolf.Once you are targeted by him, either you actively solve the problem, or wait for him to solve you.

Liu Gang felt a lot of pressure for a while, so he packed up his things dully and left with the development team.

"Meng Fei, you stay."

Just as everyone was about to leave, Roan suddenly said something.

……

(End of this chapter)