Explore the risks and challenges of copy-paste vulnerabilities in software development during this 17-minute conference talk from the HITB Security Conference. Delve into the growing trend of using open-source and third-party libraries, and understand how copy-paste programming can introduce security issues. Learn about three ways developers may inadvertently create these vulnerabilities and the difficulties in detecting them. Examine real-world case studies of vulnerable methods and disclosures, and gain insights into prevention techniques. Discover a proof-of-concept tool for identifying copy-paste vulnerabilities and their impact on the open-source community.

Syllabus

Intro
Overview
Copy-Paste Vulnerabilities
Difficulties with identification
Case Study - Vulnerable Methods
Case Study - Disclosures
Recommendation for Prevention Techniques