Lukas' Random Thoughts

Latest blog posts

  • A tale about trusted_domains

    ownCloud is all about protecting your data and as part of our development cycle we’re proactively auditing and assessing the security of ownCloud. In fact, most security bugs that we fix are discovered by our very own security team and not by third-party researchers (although, keep those fixes coming third-party researchers!). Many of the bugs with…

    ,

  • Diving into EGroupware: Object Injection

    Last weekend my colleague Andreas Fischer and I decided to take a look at EGroupware which is a PHP-based groupware used by quite some renowned organizations especially in the German speaking part of Europe (for example Universities). Our 4 hour short audit lead to the discovery and patching of a few vulnerabilities, in this post I’m going to feature one of…

    ,

  • Contributing back to open-source

    In the open-source community the so-called “Linus’s Law” by Eric Raymond is often cited as one of the reasons why open-source projects would be so much better and more bug-free than closed source alternatives. But is that actually the truth? Let’s take a look at said “law”: Given a large enough beta-tester and co-developer base,…