Damon is a Software Architect for Black Duck by Synopsys. He has a passion for innovation and invention. He also works on the design and development of efficient data-structures, methodologies and algorithms for identifying open source code. Cyber-security, sailing and Jujitsu are among his recent interests. Previously, Damon worked at Mobile Messenger/PAYVIA, Soundbite Communications and Harmonix Music.
We ran an experiment to find vulnerabilities in open source code using package manager data vs. signature-based detection. See our examples and results.
Posted in Open Source Security | Comments Off on Pandora’s box: Exploits show package manager blind spots