016 Perfect Counterattack Storm
Liu Gang even thought: "Did he find a vulnerability and secretly download the code of the development team?"
If this is the case, he would come out without hesitation to the entire company for filing the loophole group to steal their development results and threaten to ask the company to fire the person!
"The occurrence of this problem is related to the input string and is very random."
Meng Fei ignored the shock of everyone present, his eyes flashed with strange light of confidence, and said while operating:
"But I found such a combination that can reproduce this problem 100%.
He entered the same sentence again, and sure enough, the input method was stuck again.
"Now I'll try to fix it."
After saying that, he opened the program directory "Program files" under the system, and then found the directory "MantisSoft" of the Mantis Software.
Next is the intranet security "Security", and he found a file "e.dll".
The intranet security gate of Mantis Software, this is a dynamic library, and it is undoubtedly a product of Liu Gang and his team.
When you open the file, there are a large piece of dense binary code. This is not the source code, it is the machine code.
In the eyes of humans, this is a bunch of meaningless numbers.
Programmers can understand machine code. But they have to take thousands of pages of instruction manual and check them one by one.
Can anyone remember the machine code of all the instructions? Maybe there is such a pervert, but in this conference room, there is definitely not!
What's more, remembering is useless. Instructions are just instructions, which are separated from the specific execution logic and environment, so they are nothing.
The final execution code compiled by Liu Gang and others has gone through various obfuscations and virtualizations, which is dazzling to prevent it from being cracked.
Even if Meng Fei knows that there is a bug here, can you find the correct modification point?
However, just as he was skeptical, Meng Fei first backed up the file, then clicked the mouse and keyboard, and modified several strings of numbers.
Can he understand machine code?
Of course not!
But he has the strongest bug system. The program entered his eyes and scanning the bug would not require his power.
As for modifying the machine code, he just needs to modify some bytes.
Wouldn't he change things randomly?
What does it matter if it is broken? Just let the system repair it instantly.
So many people present, but no one could find out that something was wrong?
Of course there is no more.
Everyone sees a bunch of numbers, and you are quick to operate, so who can see clearly what you have changed?
Save, restart the computer. Open and enter the same sentence.
Extremely smooth, without lag!
Meng Fei restored the backup file he had kept before modification, restarted the system, and then entered the same sentence.
Sure enough, it was stuttered again!
Modify, test, problem solving.
Recovery, test, and problems reappear.
Iron-like evidence, there is no doubt about it.
Luo An, who was used to seeing too many big scenes, was not shocked on his face, but his appreciation and satisfaction with Meng Fei was obvious.
Liu Gang's face was so anxious that his face was almost tilted.
He has completely defeated this matter.
No matter how serious this problem is, whether it is a bug, or whether the vulnerability group has asked this question or not, they rejected the changes.
Their problems caused users to complain, and when they were demonstrated on the spot in front of the big boss, he was completely defeated.
But Luo An did not let it go and continued to ask Meng Fei:
"You said you mentioned this bug once, but the development team refused to fix it?"
Meng Fei clicked the mouse and found an old email four months ago.
Even Ouyang Cong admired it. With such a big time span, how did you find the relationship with it and counterattack?
Of course he didn't know that from scanning bugs to finding users to complain and finding emails to submit bugs in advance, Meng Fei had already prepared the system one-stop service.
“The principle of this is actually very simple.
"The intranet security system prevents untrusted access to the external network by programs.
"And this input method will try to pop up advertisements when the user enters certain strings.
“There are many sources of advertising.
"Most of these source URLs have been added to the trust list, so you won't get stuck at all when you enter the text.
"But a very small number of advertising source URLs are not on the whitelist and are blocked by the intranet security system.
"If the connection is interrupted directly, the consequence is that there is no advertisement and the input is still normal.
"But the way our security system blocks is not to interrupt the connection, but to hang."
If you suspend it, it is blocked and there is no reply. You don’t know whether this road is open or not, you only know that it is blocked. Then the input method is useless, so you can only wait.
It gets stuck as soon as you wait. It will take about several seconds to get stuck.
It is acceptable to use other operations for a few seconds. When entering text, it is like stuttering, and the user will feel uncomfortable all over.
"A few months ago, when we tested, we found that the way the security system blocked was to hang, so we sent this email to the development team."
Meng Fei read out the content of the email: "Pending blocking will cause unpredictable lags and may affect the user experience. It is recommended to directly interrupt the connection."
"But the development team did not reply."
Meng Fei mercilessly nailed the last nail on the coffin cover. The audience was silent.
In fact, Liu Gang is also very unfair about this matter.
Whether to suspend or interrupt is just a policy issue.
If it is suspended, the connection is still alive, the program will not die, which is theoretically more gentle than brute force interruption.
You now say that it should be interrupted, so who knows whether a more weird problem will occur in other situations after changing to interrupt?
The vulnerability group only needs to ask questions and suggestions for improvement.
However, whether this suggestion is feasible, and whether it will cause trouble when released is not needed or can’t be managed.
If you make the modification, the development team will be the one who takes the blame in the end?
Therefore, it is reasonable for their people to not reply to the email or refuse to modify it after reading it.
But it’s too late to say anything now. User complaints and evidence on the scene are in front of you.
The vulnerability group asked the question four months ago, accurately predicting the possibility of users complaining, and they refused to fix it!
If he continues to struggle with the question of whether to interrupt or suspend such an unsolvable topic, it will only make Luo An feel that he is not responsible and unwilling to take responsibility.
"This is indeed our problem."
Liu Gang had a calm face and admitted defeat.
"In the future, I will supervise the development team to follow up on the bugs raised and make sure that every problem will be properly solved."
Luo An nodded in admiration:
"It's good to find the problem. Today's meeting was too long, so that's all. Liu Gang, go back and write down the meeting minutes and send out specific improvement measures in the future."
This is the style of Luo An, and his emotions are not reflected in his expression.
He never criticizes anyone directly in front of everyone. This will make the criticized person feel embarrassed and his enthusiasm will be hit.
But the problems that should be solved must also be solved. It is useless to express your determination, and you must see specific measures that can be implemented.
It is not possible to have measures alone. In the future, it depends on whether the measures are implemented and what the results are implemented.
He will pursue you like a wolf. Once he is targeted, you will either actively solve the problem or wait for him to solve you.
Liu Gang felt very stressed for a moment, so he packed up his things and left with the development team's men.
"Meng Fei, stay."
Just as everyone was about to disperse, Luo An suddenly said.
...
Chapter completed!