BSides Iowa 2018: "LANGSEC: Defending against iOS text bombs"
Channel: BSidesIowa
Date: 15/04/2018

BSides Iowa 2018 - Track 1
Speaker: Chad Brewbaker

On February 15, 2018 another iOS text bomb crashed phones worldwide that attempted to render a class of unicode strings.

LANGSEC uses formal parsers to eliminating entire classes of security defects caused by human error in eyeballing ad-hoc parsers. In this talk we will introduce the defensive coding practices of LANGSEC, how to spot LANGSEC violations in your existing code, and give a brief introduction to the HAMMER tool for writing formally correct binary parsers.