016 The perfect counter-attack storm
Liu Gang even thought: "Could it be that he found a vulnerability and secretly downloaded the code of the development team?"
If that were the case, he wouldn't hesitate to come out and accuse the whole company of stealing their developments, and threaten to fire the company with his resignation!
"The problem is related to the input string, which is very random. ”
Meng Fei ignored the shock of everyone present, his eyes flashed with a strange confident light, and he said as he operated:
"But I've found a combination that can reproduce the problem 100 percent. ”
He typed the same sentence again, and sure enough, the input method was stuck again.
"Now I'll try to fix it. ”
After speaking, he opened the program directory "Program files" under the system, and then found the directory of the mantis software "MantisSoft".
Next came Intranet Security, and he found a file "Misnetgate.dll".
The door of mantis software intranet security, this is a dynamic library, and it is undoubtedly the product of Liu Gang and his group.
Open the file, a large piece of dense binary code. This is not source code, it is machine code.
In the eyes of humans, this is just a bunch of meaningless numbers.
Programmers can recognize machine code. But you have to take thousands of pages of instruction manuals and check them one by one.
Can anyone memorize the machine code for all the instructions? Maybe there is such a perversion, but in this room, there is certainly not!
Not to mention that it's useless to remember. Instructions are just instructions, and if they are separated from the specific execution logic and environment, they are nothing.
Liu Gang's final execution code compiled by them has gone through various confusions and virtualizations, which is dazzling to death to prevent it from being cracked.
Even if you Meng Fei know that there is a bug here, can you find the correct modification point?
However, in his strongly questioning gaze, Meng Fei first backed up the files, then connected the mouse and keyboard, and modified several strings of numbers.
Can he read machine code?
Of course not!
But he has the strongest bug system. The program came into his eyes, and it didn't take him a step to scan for bugs.
As for modifying the machine code, he just changed a few bytes.
Isn't he going to change things badly?
What does it matter if it's broken? Just let the system fix it instantly.
With so many people watching, no one could find out what's going on?
Of course not.
All you see is a bunch of numbers, and you are quick to operate, who can see what you have changed.
Save and restart your computer. Open it again and type the same sentence.
Smooth and stutter-free!
Meng Fei restored the backup file that he had kept before the modification, restarted the system, and entered the same sentence again.
Sure enough, it was stuck again!
Modify, test, problem-solve.
Recover, test, and the problem recurs.
Evidence is ironclad, and there is no doubt about it.
Luo An, who was used to seeing too many big scenes, did not have much shock on his face, but his appreciation and satisfaction with Meng Feiqi were obvious.
And Liu Gang was so anxious that his face was almost crooked.
He had been utterly defeated.
It doesn't matter how serious the issue is, whether it's a bug or not, and whether or not the vulnerability team has raised the issue and whether they reject the change.
Their problems led users to complain, and by the time they were presented to the big boss on the spot, he had already been completely defeated.
But Luo An didn't let it go, and continued to ask Meng Fei:
"You said you mentioned this bug, but the development team refused to fix it?"
Meng Fei clicked the mouse, and he found an old email from four months ago.
Even Ouyang Cong admired it. With such a big time span, how did you find out the counterattack for all the things that were linked together?
Of course, he didn't know that from scanning for bugs, to looking for user complaints, and looking for emails from them to submit bugs in advance, Meng Fei had already prepared the system for one-stop service.
"The principle of this is actually quite simple.
"Intranet security systems block programs from untrusted access to external networks.
And this input method will try to pop up ads when the user enters certain strings.
"Advertising comes from a variety of sources.
"Most of these referrers have been added to the trust list, so you don't usually get stuck typing text.
"However, there are a very small number of ad source URLs that are not on the whitelist and are blocked by the intranet security system.
"Originally, if the connection was directly interrupted, the consequence would be that there would be no ads, and the input would be normal.
"But the way our security system blocks it is not by disconnecting, but by hanging. ”
To hang is to give a blockage, no reply. You don't know if the road is going to work, you just know it's blocked. Then the input method is out of line, and you can only wait.
As soon as I waited, I got stuck. It takes about a few seconds to get stuck.
Usually, other operation cards are acceptable for a few seconds. When you get stuck while typing, it's like stammering, and the user will feel uncomfortable.
"A few months ago, when we were testing, we found that the way the security system was blocking was hanging, so we sent this email to the development team. ”
Meng Fei read out the content of the email: "Blocking in a suspended way will lead to unpredictable lag, which may affect the user experience, and it is recommended to directly disconnect the connection." ”
But the development team did not reply. ”
Meng Fei mercilessly nailed the last nail of the coffin cover. The audience was silent.
In fact, Liu Gang was also very wronged in this matter.
Suspend or interrupt it's just a matter of policy.
If it is suspended, the connection is still alive, and the program is still alive, which is theoretically milder than a violent interruption.
Now that you're saying it should be interrupted, who knows if it will lead to weirder problems in other cases?
The vulnerability group only needs to ask questions and suggestions for improvement.
However, whether this suggestion is feasible or not, and whether it will stab Lou Zi if it is released is not necessary and cannot be managed.
Modifications, and in the end it is not the development team itself that bears the blame?
Therefore, it is reasonable for their people to read the email and not reply directly, or to reply to the reason and refuse to modify it.
But it's too late to say anything now. The complaints of users and the evidence of the scene are all in front of you.
The bug group raised the issue four months ago, accurately predicting the likelihood of a user complaining, and they refused to fix it!
If he continues to struggle with whether he should interrupt or hang up on this fundamentally unsolvable topic, it can only make Luo An feel that he is not responsible and unwilling to take responsibility.
"That's really our problem. ”
Liu Gang admitted with a calm face.
"In the future, I will supervise the follow-up of the development team on the side of the bugs and make sure that every problem is properly resolved. ”
Luo An nodded appreciatively in the same way:
"It's good to be able to find the problem. Today's meeting is too long, so that's it. Liu Gang, go back and write down the minutes of the meeting and send out specific improvement measures in the future. ”
That's how Roan's style is, moody and moody.
He never criticizes anyone directly in front of everyone. This will make the criticized person very faceless and his motivation will be discouraged.
But the problems that should be solved must also be solved. It is useless to show determination, and concrete measures must be seen.
Measures alone will not suffice, and in the future it will depend on whether the measures are implemented and what the results of their implementation will be.
He'll chase you like a wolf. Once you are targeted by him, then either you actively solve the problem or wait for him to solve you.
Liu Gang felt a lot of pressure for a while, and packed up his things and left with the people of the development team in a dull manner.
"Meng Fei, you stay. ”
Just as everyone was about to disperse, Luo An suddenly spoke.
......
(This book is still in the early stage, and I urgently need feedback from readers, I still have time to revise if I have questions, and if you are interested in helping me, you can add me on WeChat, 16191935)