SEI Insights
Posted on by in Tools
Hi folks, it's Will. Apple has released OS X Mavericks. Because BFF 2.7 was released before Mavericks, BFF doesn't work right out of the box. But it's actually quite simple to get it working.
If you try to install and run BFF 2.7 on OS X Mavericks, you may be presented with an error like this:
Traceback (most recent call last):
File "/Users/admin/bff/bff.py", line 565, in <module>
main()
File "/Users/admin/bff/bff.py", line 335, in main
debuggers.verify_supported_platform()
File "/Applications/BFF.app/Contents/Resources/bff/certfuzz/debuggers/registration.py", line 77, in verify_supported_platform
raise DebuggerNotFoundError(debugger)
certfuzz.debuggers.errors.DebuggerNotFoundError: Could not find debugger 'cw' in path
Basically, this is BFF saying that it cannot find the CrashWrangler binary. On the OS X Mavericks platform, it is looking for exc_handler_mavericks.
Follow these steps to get BFF 2.7 running on OS X Mavericks:
exc_handler_mavericks to /usr/local/binsudo cp ~/Downloads/crashwrangler/binaries/exc_handler_mavericks /usr/local/bin).With this change, you should be ready to fuzz!
Contact Will Dormann
Visit the SEI Digital Library for other publications by Will
View other blog posts by Will Dormann
CERT/CC
Insider Threat
SATURN
SEI Blog
DevOps
CERT/CC
Insider Threat
SATURN
SEI Blog
DevOps
Posted on by
In academia, government, and industry, DevOps has become a standard, straightforward option for streamlining efforts and increasing comprehensive participation by all stakeholders in the software development lifecycle (SDLC). In highly regulated environments (HREs) within these three sectors, however, applying DevOps can prove challenging. HREs are mandated by policies for various reasons, the most often being general security and protection of intellectual property thus making the sharing and open access principles of DevOps that much harder to apply. In this blog post series DevOps and HREs, which is based on a published paper, we will discuss the process, challenges, approaches, and lessons learned in implementing DevOps in the software development lifecycle in HREs. In this first post, we will explore challenges (and goals) to implementing DevOps in HREs. The majority of what you will read in the series stems from our experiences in performing these tasks. In addition to presenting challenges, this post gives an overview of what an HRE is, what you should expect to find in these environments, and what DevOps implementation obstacles may be present.