This forum is provided to promote discussion amongst students enrolled in
CITS3007 Secure Coding.
If posting a question, it's suggested you check first whether your question
is answered in the unit Frequently Asked Questions (FAQ) list, and use the search box
(on the right) to see if an answer to your question has already been posted.
Please consider offering answers and suggestions to help other students!
And if you fix a problem by following a suggestion here,
it would be great if other interested students could see a short
"Great, fixed it!" followup message.
Hi all,
Over the Easter weekend, malicious code ( CVE-2024-3094 cve ) was discovered in the popular XZ Utils xz compression package which created a backdoor bd into affected Linux systems.
The incident has been very widely reported in technical...
Hi all,
Marks for the quiz are now available on csmarks (https secure.csse.uwa.edu.au run csmarks), and feedback on individual questions should be viewable on Moodle.
The average mark for the quiz was 85 , which is excellent. Except for the very las...
Hi all,
As mentioned in today's lecture, the 8am Thursday lab sessions have had very low turnout (only one person last week), which means it's difficult to justify running them. I'll therefore be cancelling that lab slot after this week - if you were ...
Hi all,
The quiz has now closed, and it looks like the average is fairly high, which is great I take it to mean people have a pretty good understanding of basic concepts. (Or that I made the questions too easy.)
As per the rubric rubric , short a...
Hi all,
Just a reminder regarding student conduct requirements.
I allow a fair bit of flexibility regarding when students sit the online tests they can be started at any convenient time in a 24-hour block.
However, students must still comply with th...
Hi all,
I won't be holding my usual office hours (4-5pm) today, as I'll be preparing to release the Moodle quiz (worth 5 ) that opens at 5pm.
I'll discuss the quiz more in today's lecture, but there are some tips and instructions here quiz if needed...
Can you clarify exactly what it is you don't understand? Otherwise it's difficult for me to know what needs explaining. (In future, it would also be helpful if you gave the exact slide number you're referring to.)
However, I do note that you've quoted...
I'd suggest working through (and reviewing) the lecture and lab content, first, and referring to the recommended readings if anything is unclear. There are a few topics which are often poorly understood, though, namely
- setuid programs, and
- integer ...
There are no incompatibilities between the libvirt disk image and the virtualbox disk image. They contain exactly the same software packages, running on exactly the same Linux kernel, on exactly the same (virtualised) hardware. The hostname (stor...
WAIT Less stop
By following the instructions on https cits3007.github.io labs lab01-utm.html, the .box file they get us to download is from the libvirt provider (you can see this by looking at the URL for the box, https ...
Hi.
In the last lecture, it was said that " buf is a local variable, that s in the current stack frame. The other variables in this code are local variables. Those variables are overwritten, then the return address is overwritten, and then the ...
Hi.
How necessary are the readings? Hypothetically, if a student could only do one, should they ensure that they understand the lecture and lab content, or should they ensure that they've read all of the readings?
YESSSSS I FINALLY DID IT WOO D D D Less gooo
I've been trying this for HOURS But what you said was exactly what I was looking for I didn't realise that the other link that existed in the lab 1 worksheet here (https...
Hi all,
Just a reminder that the first assessment (an online Moodle quiz, worth 5 ) will be run next week, so you should make sure you've signed up for Moodle and reviewed the content for weeks 1 3. Participating in the quiz is restricted to enrolle...
hi
vagrant is a tool that help to download cits3007 SDE and put it in virtualbox. you dont have to use vagrant to manage your vm if you finished Ben's UTM setup guide. because you have the cits3007 VM condition alr. its included in Ben's UTM setup gui...
In case people are interested although Java and Python both use exceptions, some more recent languages have moved away from exceptions as an approach to error-handling. (For instance, neither Rust nor Go have exceptions.)
A big problem with exception...
Thanks for letting me know. Just to clarify the lab worksheet "Using UTM on M-series Mac laptops" suggests a different process to the one you seem to have used. You've extracted a .vmdk file from your .vagrant.d directory, then used qemu-img to co...
I've tried doing numerous times this but had no success. It's a shame as I have successfully done this extraction before, though it has always been a hit-or-miss.
Going into .vagrant.d boxes arranstewart-VAGRANTSLASH-cits3007-ubuntu2004 0.1.4 vir...