ISS XFORCE
caddis
IRL Name:
Chris Spencer
Biography:
Accredited for finding numerous vulnerabilities for IBM Internet Security Systems;
while working on their team code named XFORCE.
Found buffer overflows in such applications as Sun Solaris's CDE (common desktop environment)
and HP's HP-UX printer daemon (rlpdaemon).
A previous speaker of Blackhat where in 2002 spoke on "Professional Source Code Auditing".
