A month of bugs is a strategy used by security researchers to draw attention to the lax security procedures of commercial software corporations. Researchers have started such a project for software products where they believe corporations have shown themselves to be unresponsive and uncooperative to security alerts.

Responsible disclosure In computer security, coordinated vulnerability disclosure, or "CVD" (formerly known as responsible disclosure) is a vulnerability disclosure model in which a vulnerability or an issue is disclosed to the public only after the responsible partie ...

is not working properly, and then find and disclose one

security vulnerability Vulnerabilities are flaws in a computer system that weaken the overall security of the device/system. Vulnerabilities can be weaknesses in either the hardware itself, or the software that runs on the hardware. Vulnerabilities can be exploited by ...

each day for one month.

Examples

The original "Month of Bugs" was the ''Month of Browser Bugs'' (MoBB) run by security researcher HD Moore. Subsequent similar projects include: * The ''Month of Kernel Bugs'' (MoKB) which published

kernel Kernel may refer to: Computing * Kernel (operating system), the central component of most operating systems * Kernel (image processing), a matrix used for image convolution * Compute kernel, in GPGPU programming * Kernel method, in machine learn ...

bugs for

Mac OS X macOS (; previously OS X and originally Mac OS X) is a Unix operating system developed and marketed by Apple Inc. since 2001. It is the primary operating system for Apple's Mac computers. Within the market of desktop and la ...

Linux Linux ( or ) is a family of open-source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991, by Linus Torvalds. Linux is typically packaged as a Linux distribution, w ...

, FreeBSD, Solaris and

Windows Windows is a group of several proprietary graphical operating system families developed and marketed by Microsoft. Each family caters to a certain sector of the computing industry. For example, Windows NT for consumers, Windows Server for ser ...

, as well as four

wireless Wireless communication (or just wireless, when the context allows) is the transfer of information between two or more points without the use of an electrical conductor, optical fiber or other continuous guided medium for the transfer. The most ...

driver bugs. * The ''Month of Apple Bugs'' (MoAB) conducted by researchers Kevin Finisterre and LMH which published bugs related to Mac OS X. * The ''Month of PHP Bugs'' sponsored by the Hardened PHP team which published 44 PHP bugs.

Examples

See also

References

Further reading

External links