Mastering Secure Software Building with Run Safe Code: Docker File Comparison and Protection Demo
Explore the world of secure software building with our latest video! 👨💻🔒
🔍 In this tutorial, we compare two Docker files. On the left, we build software in a standard environment, installing compilers, Python tools, etc. The resulting software has vulnerabilities like buffer overflow and information leaks.
🚀 On the right, we showcase building with Run Safe code protections. While we won’t perform the builds live, we have pre-built images to highlight the differences. We use a CentOS 7 environment, installing Alchemist, LFR (RunSafe code), and then run the build using LFR Helper Make. The protected version still logs GPS coordinates but with enhanced security.
🕵️♂️ We demonstrate an exploit on the vulnerable version, leaking information and creating a file. However, the same exploit on the protected version fails due to Run Safe code protections, preventing unauthorized memory access.
💡 Wondering how to secure your code? Instead of manual analysis and patching, use Run Safe code with a simple package install and adding LFR Helper to your build commands. It’s compatible with various Linux environments, including Alpine, Debian, Ubuntu, CentOS, Rocky Linux, Red Hat, and integrates seamlessly with AOSP, OpenWRT, Yocto, Build Root, and Artifactory.
🔐 Protect your software effortlessly and join us on this journey to a safer coding environment!
🚀👩💻 #SecureCoding #SoftwareSecurity #Docker #RunSafeCode
centos 7
