Hi, The material we actually covered in week 7 (last week) is already up, and the week 8 material will go up prior to the lecture. I normally try to ensure lecture slides are up on the Monday or Tuesday, but during particularly busy weeks (for instanc...

Hi all, I mentioned in lectures that you don't need to be a security expert to identify a vulnerability plenty of people have discovered vulnerabilities in existing programs armed with nothing more than a general knowledge of good coding practices...

Hi all, The mid-semester test should now be visible to you on Moodle (though it can't be started until it unlocks at 5pm) let me know if it's not showing up. The number of questions and marks are listed in the test instructions. (Also, if you're no...

Hi all, Just a note that I won't be available for my usual office hours today (4 5pm), as I'll be preparing the mid-semester test for release. If you need to meet with me, just email instead to arrange a suitable time. Cheers Arran

Hi, Short answer the default shell in your VM was deleted by a command you typed; the best thing to do is throw away your current VM instance, and start a new one. Longer answer The reason you're seeing those errors is due to a failed, prior command t...

Hi all, Just a reminder that if for some reason you're regularly unable to attend a lab session, you should email me and let me know. Keeping up with the lab content is an important part of the unit, and (especially for the project) it's a good idea to...

Hi all, I'll discuss the upcoming mid-semester test and the project a bit more in tomorrow's lecture, but here is some basic information about them. Mid-sem test The test will have mostly multi choice and short answer questions, similar to the week ...

Hi all, Over the Easter weekend, malicious code ( CVE-2024-3094 cve ) was discovered in the popular XZ Utils xz compression package which created a backdoor bd into affected Linux systems. The incident has been very widely reported in technical...

Hi all, Marks for the quiz are now available on csmarks (https secure.csse.uwa.edu.au run csmarks), and feedback on individual questions should be viewable on Moodle. The average mark for the quiz was 85 , which is excellent. Except for the very las...

Hi all, As mentioned in today's lecture, the 8am Thursday lab sessions have had very low turnout (only one person last week), which means it's difficult to justify running them. I'll therefore be cancelling that lab slot after this week - if you were ...

Hi all - Apologies for the delay. Just letting you know that quiz marks should be available either later today or tomorrow. Cheers Arran

Hi all, The quiz has now closed, and it looks like the average is fairly high, which is great I take it to mean people have a pretty good understanding of basic concepts. (Or that I made the questions too easy.) As per the rubric rubric , short a...

Hi all, Just a reminder regarding student conduct requirements. I allow a fair bit of flexibility regarding when students sit the online tests they can be started at any convenient time in a 24-hour block. However, students must still comply with th...

Hi all, I won't be holding my usual office hours (4-5pm) today, as I'll be preparing to release the Moodle quiz (worth 5 ) that opens at 5pm. I'll discuss the quiz more in today's lecture, but there are some tips and instructions here quiz if needed...

Can you clarify exactly what it is you don't understand? Otherwise it's difficult for me to know what needs explaining. (In future, it would also be helpful if you gave the exact slide number you're referring to.) However, I do note that you've quoted...

I'd suggest working through (and reviewing) the lecture and lab content, first, and referring to the recommended readings if anything is unclear. There are a few topics which are often poorly understood, though, namely - setuid programs, and - integer ...

There are no incompatibilities between the libvirt disk image and the virtualbox disk image. They contain exactly the same software packages, running on exactly the same Linux kernel, on exactly the same (virtualised) hardware. The hostname (stor...

Glad to hear you got things working. I'll add the username and password details to the lab sheet. Cheers, Arran

Hi all, Just a reminder that the first assessment (an online Moodle quiz, worth 5 ) will be run next week, so you should make sure you've signed up for Moodle and reviewed the content for weeks 1 3. Participating in the quiz is restricted to enrolle...

In case people are interested although Java and Python both use exceptions, some more recent languages have moved away from exceptions as an approach to error-handling. (For instance, neither Rust nor Go have exceptions.) A big problem with exception...

Thanks for letting me know. Just to clarify the lab worksheet "Using UTM on M-series Mac laptops" suggests a different process to the one you seem to have used. You've extracted a .vmdk file from your .vagrant.d directory, then used qemu-img to co...

Hi, Yes, solutions to any problems posed in a lab worksheet will normally get posted on the website the following week. Cheers, Arran ANONYMOUS wrote

Hi all, Just to let you know, slides for this week (and probably part of next week) got published on the website last night apologies for the delay. (But note that you can access previous versions of the unit's material via the Internet Archive a...

Hi, Just to clarify, have you tried following the lab instructions here utm , which are linked to from the Lab 1 worksheet here lab1 ? Those instructions suggest using - the UTM gallery's ARM64 Ubuntu 22.04 image, which should be fine for most purp...

Hi, Yes, there's no problem with that, any 5.( something ) version is fine. (In fact, the labs should work with any 4. x kernel as well, and some 3. x kernels. The main changes that affect the labs are differences in security features between kernel ...

Hi all, In yesterday's lecture I was asked if using a systems programming language like Rust could help avoid some of the security bugs that are often seen in C code. I mentioned that it can indeed help but it's important to note that it's still...

Hi all, Lecture slides for this week are available on the unit website lect . I recommend taking at least a brief look at these before the lecture then the concepts won't be completely new to you, and you'll be able to ask any questions that you ...

Hi everyone, Welcome to CITS3007 "Secure Coding". I'm your Unit Coordinator, Arran Stewart. I'll be teaching the unit with the help of our facilitators facilitators , Carl, Nicodemus, and Santiago. facilitators https cits3007.github.io facilitat...