Project Zero

For other uses, see Project Zero (disambiguation).

Project Zero is a team of security analysts employed by Google tasked with finding zero-day vulnerabilities.[1] It was announced on 15 July 2014.[2]

History

After finding a number of flaws in software used by many end-users while researching other problems, such as the critical "Heartbleed" vulnerability, Google decided to form a full-time team dedicated to finding such vulnerabilities, not only in Google software but any software used by its users. The new project was announced on 15 July 2014 on Google's security blog.[2] When it launched, one of the principal innovations that Project Zero provided was a strict 90-day disclosure deadline along with a publicly visible bugtracker where the vulnerability disclosure process is documented.[3]

While the idea for Project Zero can be traced back to 2010, its establishment fits into the larger trend of Google's counter-surveillance initiatives in the wake of the 2013 global surveillance disclosures by Edward Snowden. The team was formerly headed by Chris Evans, previously head of Google's Chrome security team, who subsequently joined Tesla Motors.[4] Other notable members include security researchers Ben Hawkes, Ian Beer and Tavis Ormandy.[5] Hawkes eventually became the team's manager and then resigned on 4 May 2022.

The team's focus is not just on finding bugs and novel attacks, but also on researching and publicly documenting how such flaws could be exploited in practice. This is done to ensure that defenders have sufficient understanding of attacks; the team keeps an extensive research blog with articles that describe individual attacks in detail.[6]

Bug finding and reporting

Bugs found by the Project Zero team are reported to the manufacturer and only made publicly visible once a patch has been released[2] or if 90 days have passed without a patch being released.[7] The 90-day-deadline is Google's way of implementing responsible disclosure, giving software companies 90 days to fix a problem before informing the public so that users themselves can take necessary steps to avoid attacks.[7] There have been cases where the vendor does not produce any solution for the discovered flaws within 90 days, before the public disclosure by the team, increasing the risk to already-vulnerable users.[8]

Notable members

Past members

Notable discoveries

  • One of the first Project Zero reports that attracted attention involved a flaw that allowed hackers to take control of software running the Safari browser.[18] For its efforts, the team, specifically Beer, was cited in Apple's brief note of thanks.
  • On 30 September 2014, Google detected a security flaw within Windows 8.1's system call "NtApphelpCacheControl", which allows a normal user to gain administrative access.[19] Microsoft was notified of the problem immediately but did not fix the problem within 90 days, which meant information about the bug was made publicly available on 29 December 2014.[7] Releasing the bug to the public elicited a response from Microsoft that they are working on the problem.[7]
  • On 9 March 2015, Google Project Zero's blog posted a guest post that disclosed how a previously known hardware flaw in commonly deployed DRAM called Row Hammer could be exploited to escalate privileges for local users.[20] This post spawned a large quantity of follow-up research both in the academic and hardware community.
  • On 19 February 2017, Google discovered a flaw within Cloudflare's reverse proxies,[21] which caused their edge servers to run past the end of a buffer and return memory that contained private information such as HTTP cookies, authentication tokens, HTTP POST bodies, and other sensitive data. Some of this data was cached by search engines.[22] A member of the Project Zero team referred to this flaw as Cloudbleed.[21]
  • On 27 March 2017, Tavis Ormandy of Project Zero discovered a vulnerability in the popular password manager LastPass.[23] On 31 March 2017, LastPass announced they had fixed the problem.[24]
  • Project Zero was involved in discovering the Meltdown and Spectre vulnerabilities affecting many modern CPUs, which were discovered in mid-2017 and disclosed in early January 2018.[25] The issue was discovered by Jann Horn independently from the other researchers who reported the security flaw and was scheduled to be published on 9 January 2018 before moving the date up because of growing speculation.[9]
  • On 1 February 2019, Project Zero reported to Apple that they had detected a set of five separate and complete iPhone exploit chains affecting iOS 10 through all versions of iOS 12 not targeting specific users but having the ability to infect any user who visited an infected site. A series of hacked sites were being used in indiscriminate watering hole attacks against their visitors which Project Zero estimated receive thousands of visitors per week. Project Zero felt the attacks indicated a group making a sustained effort to hack the users of iPhones in certain communities over a period of at least two years.[26] Apple fixed the exploits in the release of iOS 12.1.4 on 7 February 2019,[27] and said the fixes were already underway when reported by Project Zero.[28]
  • On 18 April 2019, Project Zero discovered a bug in Apple iMessage wherein a certain malformed message could cause Springboard to "...crash and respawn repeatedly, causing the UI not to be displayed and the phone to stop responding to input."[29] This would completely crash the iPhone's UI making it inoperable. This bug would persist even after a hard reset. The flaw also affected iMessage on Mac with different results. Apple fixed the bug within the 90 day period before Project Zero released it.
  • In December 2021, the team published a technical breakdown of the FORCEDENTRY exploit based on its collaboration with Apple’s Security Engineering and Architecture (SEAR) group.[30]

See also

References

  1. ^ Greenberg, Andy (15 July 2014). "Meet 'Project Zero,' Google's Secret Team of Bug-Hunting Hackers". Wired. ISSN 1059-1028. Retrieved 6 March 2019.
  2. ^ a b c Evans, Chris (15 July 2014). "Announcing Project Zero". Google Online Security Blog. Retrieved 4 January 2015.
  3. ^ "Project Zero Bug Tracker". Retrieved 11 April 2019.
  4. ^ "Chris Evans on Twitter". Retrieved 22 September 2015.
  5. ^ a b c d e f Greenberg, Andy (15 July 2014). "Meet 'Project Zero,' Google's Secret Team of Bug-Hunting Hackers". Wired.com. Retrieved 4 January 2015.
  6. ^ "Project Zero Research Blog". Retrieved 11 April 2019.
  7. ^ a b c d Dent, Steven (2 January 2015). "Google posts Windows 8.1 vulnerability before Microsoft can patch it". Engadget. Retrieved 4 January 2015.
  8. ^ Fingas, John (4 March 2019). "Google discloses 'high severity' Mac security flaw ahead of patch". Engadget. Retrieved 6 March 2019.
  9. ^ a b Davies, Chris (3 January 2018). "Google reveals CPU security flaw Meltdown and Spectre details". SlashGear. Retrieved 4 January 2018.
  10. ^ "Google says it's too easy for hackers to find new security flaws". Retrieved 3 February 2021.
  11. ^ a b "aPAColypse now: Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript". 18 December 2017. Retrieved 18 December 2017.
  12. ^ "Over The Air: Exploiting Broadcom's Wi-Fi Stack (Part 1)". 4 April 2017. Retrieved 12 April 2019.
  13. ^ "Lawfareblog Hard National Security Choices Matt Tait". Retrieved 9 March 2017.
  14. ^ "Project Zero: Designing sockfuzzer, a network syscall fuzzer for XNU". Project Zero. 22 April 2021. Retrieved 13 November 2024.
  15. ^ "Project Zero: An EPYC escape: Case-study of a KVM breakout". Project Zero. 29 June 2021. Retrieved 13 November 2024.
  16. ^ "iOS zero-day let SolarWinds hackers compromise fully updated iPhones". 14 July 2021. Retrieved 14 July 2021.
  17. ^ TIME Cybersecurity: Hacking, the Dark Web and You. Time Inc. Books. 19 January 2018. ISBN 9781547842414.
  18. ^ "Issue 118: Windows: Elevation of Privilege in ahcache.sys/NtApphelpCacheControl". 30 September 2014. Retrieved 4 January 2015.
  19. ^ "Exploiting the DRAM rowhammer bug to gain kernel privileges". 9 March 2015. Retrieved 11 April 2019.
  20. ^ a b "Issue 1139: cloudflare: Cloudflare Reverse Proxies are Dumping Uninitialized Memory". 19 February 2017. Retrieved 24 February 2017.
  21. ^ "Incident report on memory leak caused by Cloudflare parser bug". Cloudflare. 23 February 2017. Retrieved 24 February 2017.
  22. ^ "Another hole opens up in LastPass that could take weeks to fix". Naked Security. 29 March 2017. Retrieved 29 March 2017.
  23. ^ Siegrist, Joe (31 March 2017). "Security Update for the LastPass Extension". LastPass Blog. Archived from the original on 7 April 2018. Retrieved 2 May 2017.
  24. ^ Greenberg, Andy (3 January 2018). "A Critical Intel Flaw Breaks Basic Security for Most Computers". WIRED. Retrieved 4 January 2018.
  25. ^ Tim (29 August 2019). "Project Zero: A very deep dive into iOS Exploit chains found in the wild". Project Zero. Retrieved 30 August 2019.
  26. ^ Cox, Joseph (30 August 2019). "Google Says Malicious Websites Have Been Quietly Hacking iPhones for Years". Vice. Retrieved 30 August 2019.
  27. ^ Goodin, Dan (7 September 2019). "Apple takes flak for disputing iOS security bombshell dropped by Google". Ars Technica.
  28. ^ "Issue 1826: iMessage: malformed message bricks iPhone". bugs.chromium.org. 18 April 2019. Retrieved 9 September 2019.
  29. ^ Beer, Ian; Groß, Samuel (15 December 2021). "Project Zero: A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution". Google Project Zero. Retrieved 16 December 2021.

Read other articles:

Lower Alsace

Lower AlsacetownshipLower Alsace – Veduta LocalizzazioneStato Stati Uniti Stato federato Pennsylvania ConteaBerks TerritorioCoordinate40°21′30″N 75°52′09″W / 40.358333°N 75.869167°W40.358333; -75.869167 (Lower Alsace)Coordinate: 40°21′30″N 75°52′09″W / 40.358333°N 75.869167°W40.358333; -75.869167 (Lower Alsace) Altitudine181,97 m s.l.m. Superficie12,17 km² Abitanti4 478 (2000) Densità367,86 ab./km² ...

 

Jabhatul Islamiya

Jabhatul IslamiyaPemimpinMohamed Ibrahim Hayle[1]Waktu operasi2007-2009KelompokUmumnya dari sub-klan HawiyeWilayah operasiSomalia bagian selatanSekutuAl-Shabaab ARS-Eritrea Brigade Ras Kamboni Muaskar AnoleLawan Pemerintah Transisi Federal ARS-Djibouti  Ethiopia AMISOM Jabhatul Islamiya atau JABISO (Arab: الجبهة الإسلاميةcode: ar is deprecated ), yang juga dikenal sebagai Front Islam Somalia (SIF), adalah sebuah kelompok pemberontak Islam di Somalia. Kelo...

 

Hering Kalkun

Hering Kalkun Status konservasi Risiko Rendah[1] Klasifikasi ilmiah Kerajaan: Animalia Filum: Chordata Kelas: Aves Ordo: Ciconiiformes Famili: Cathartidae Genus: Cathartes Spesies: C. aura Nama binomial Cathartes aura(Linnaeus, 1758) Peta persebaran Hering Kalkun. Kuning berarti persebaran saat musim panas, hijau berarti persebaran sepanjang tahun. Hering Kalkun, Cathartes aura adalah burung yang dapat ditemui hampir di seluruh benua Amerika. Hering Kalkun merupakan salah satu d...

List of artists who reached number one on the U.S. Mainstream Rock chart

This is an alphabetical list of artists who reached the number one position on the United States Billboard Mainstream Rock chart, which has been active since 1981. The number in parentheses indicates the total of number-one hits for that band on this chart. With a total of 19 songs, Shinedown hold the record for the most number ones. Contents 0–9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0-9 3 Doors Down (5)[1] Johnny 3 Tears (1)[2] .38 Special (2)[3] A AC...

 

موفق شيخ الأرض

موفق شيخ الأرض معلومات شخصية الميلاد سنة 1918   دمشق  الوفاة 19 أكتوبر 2021 (102–103 سنة)[1]  بيروت  مكان الدفن مقبرة الشهداء في بيروت  مواطنة المملكة العربية السورية (1918–1920) دولة دمشق (1920–1925) الدولة السورية (1925–1930) الجمهورية السورية الثانية (1932–1958) الجمهورية الع�...

 

Синелобый амазон

Синелобый амазон Научная классификация Домен:ЭукариотыЦарство:ЖивотныеПодцарство:ЭуметазоиБез ранга:Двусторонне-симметричныеБез ранга:ВторичноротыеТип:ХордовыеПодтип:ПозвоночныеИнфратип:ЧелюстноротыеНадкласс:ЧетвероногиеКлада:АмниотыКлада:ЗавропсидыКласс:Пт�...

Jō (arme)

Pour les articles homonymes, voir Jô. Un pratiquant de jōdō arrête la frappe d'un partenaire armé d'un bokken en interceptant les poignets de l'attaquant avec l'extrémité de son jō. Le jō (杖?, bâton moyen) est une arme traditionnelle japonaise en bois d'une longueur de 1,28 mètre et d'un diamètre de 2,6 centimètres environ[1]. Il est utilisé lors de la pratique de l'aïkido (aiki-jō), du jōdō et du jo-jutsu, et du kobudō. Le bâton de jō, de taille moyenne, se différenc...

 

PPAR agonist

Drug PPAR-alpha and -gamma pathways PPAR agonists are drugs which act upon the peroxisome proliferator-activated receptor. They are used for the treatment of symptoms of the metabolic syndrome, mainly for lowering triglycerides and blood sugar. Classification PPAR-alpha and PPAR-gamma are the molecular targets of a number of marketed drugs. The main classes of PPAR agonists are: PPAR-alpha agonists An endogenous compound, 7(S)-Hydroxydocosahexaenoic Acid (7(S)-HDHA), which is a Docosanoid der...

 

Nationalsozialistisches Kraftfahrkorps

Bendera rumah NSKK Standar NSKK Nationalsozialistisches Kraftfahrkorps (NSKK, Korporasi Motor Sosialis Nasional), atau dikenal juga sebagai Korporasi Pengemudi Sosialis Nasional, adalah organisasi paramiliter Partai Nazi yang berdiri dari 1931 sampai 1945. Di zaman kekuasaan Nazi, semua pengendara kendaraan bermotor wajib bergabung dengan NSKK yang dipimpin Adolf Hühnlein. NSKK dimasukkan sebagai bagian dari SS setelah menurunnya pamor SA akibat Peristiwa Malam Pisau Panjang tahun 1934. Hüh...

密西西比州

此條目可参照英語維基百科相應條目来扩充。 (2017年8月)若您熟悉来源语言和主题，请协助参考外语维基百科扩充条目。请勿直接提交机械翻译，也不要翻译不可靠、低品质内容。依版权协议，译文需在编辑摘要注明来源，或于讨论页顶部标记{{Translated page}}标签。 密西西比州 美國联邦州State of Mississippi 州旗州徽綽號：木蘭之州地图中高亮部分为密西西比州坐标：30°13'N�...

 

Chak Tok Ichʼaak I

Ajaw Chak Tok Ichʼaak IAjawStela 26 at Tikal bears the name Chak Tok Ichʼaak, although it is unclear if it is referring to Chak Tok Ichʼaak I or Chak Tok Ichʼaak II.[1]King of TikalReign7 August 360 - 14 January 378PredecessorKʼinich Muwaan Jol ISuccessorYax Nuun Ahiin IDied14 January 378TikalFatherKʼinich Muwaan JolMotherLady Bahlam WayReligionMaya religionSignature Chak Tok Ichʼaak I[N 1] also known as Great Paw, Great Jaguar Paw, and Toh Chak Ichʼak (died 14 January...

 

Aqueous homogeneous reactor

Type of nuclear reactor Aqueous homogeneous reactor at Oak Ridge National Laboratory Aqueous homogeneous reactors (AHR) is a two (2) chamber reactor consisting of an interior reactor chamber and an outside cooling and moderating jacket chamber. They are a type of nuclear reactor in which soluble nuclear salts (usually uranium sulfate or uranium nitrate) are dissolved in water. The fuel is mixed with heavy or light water which partially moderates and cools the reactor. The outside layer of the...

Senat Romawi Timur

Personifikasi senat. Senat Romawi Timur atau Senat Bizantium (bahasa Yunani: Σύγκλητος, Synklētos, or Γερουσία, Gerousia) merupakan lanjutan dari Senat Romawi. Senat Romawi Timur didirikan pada abad ke-4 oleh Kaisar Konstantinus I dan berdiri selama berabad-abad. Namun, lama kelamaan perannya semakin mengecil dan pada akhirnya menghilang pada abad ke-13. Senat Kekaisaran Romawi Timur pada awalnya terdiri dari senator Romawi yang tinggal di Timur, atau senator yang pindah...

 

Roscommon railway station

RoscommonRos ComáinGeneral informationLocationAbbeytown, Roscommon, County Roscommon, F42 KF85IrelandCoordinates53°38′N 8°11′W / 53.633°N 8.183°W / 53.633; -8.183Owned byIarnród ÉireannOperated byIarnród ÉireannPlatforms2ConstructionStructure typeAt-gradeOther informationStation codeRSCMNKey dates1860Station opened Roscommon railway station serves the town of Roscommon in County Roscommon, Ireland. The station is on the Dublin to Westport Rail service. Pa...

 

Ray Ewry

American track and field athlete Ray EwryEwry at the 1908 OlympicsPersonal informationFull nameRaymond Clarence EwryBorn(1873-10-14)October 14, 1873Lafayette, Indiana, U.S.DiedSeptember 29, 1937(1937-09-29) (aged 63)Long Island, New York, U.S.Alma materPurdue UniversityHeight6 ft 1 in (1.85 m)Weight174 lb (79 kg)SportSportAthleticsEvent(s)standing high, long, and triple jumpClubPurdue Boilermakers, West Lafayette, Indiana;NYAC, New YorkAchievements and ...

Lemonade Joe

1964 filmLimonádový JoeDirected byOldřich LipskýWritten byJiří BrdečkaOldřich LipskýProduced byJaroslav JílovecStarringKarel FialaMiloš KopeckýKvěta FialováOlga SchoberováMusic byJan RychlíkVlastimil HálaProductioncompaniesBratri v TrikuKratky Film PrahaBarrandov Studios (live action)Distributed byÚstřední Půjčovna Filmů v PrazeAllied Artists Pictures Corporation (US release)Release dates August 28, 1964 (1964-08-28) (East Germany) October 1964&#...

 

1750年代

此條目没有列出任何参考或来源。 (2018年9月22日)維基百科所有的內容都應該可供查證。请协助補充可靠来源以改善这篇条目。无法查证的內容可能會因為異議提出而被移除。 千纪： 2千纪 世纪： 17世纪 | 18世纪 | 19世纪 年代： 1720年代 | 1730年代 | 1740年代 | 1750年代 | 1760年代 | 1770年代 | 1780年代 年份： 1750年 | 1751年 | 1752年 | 1753年 | 1754年 | 1755年 | 1756年 | 1757年 | 1758年 | 1759年 1...

 

Lake Baikal

Freshwater rift lake in Russia Baykal redirects here. For other uses, see Baykal (disambiguation). Lake BaikalOзеро Байкал (Russian)Байгал далай (Buryat)Satellite photo of Baikal, 2001Lake BaikalShow map of Republic of BuryatiaLake BaikalShow map of Irkutsk OblastLake BaikalShow map of RussiaLocationSiberia, RussiaCoordinates53°30′N 108°0′E / 53.500°N 108.000°E / 53.500; 108.000Lake typeAncient lake, Continental rift lakePrimary i...

Selezioni giovanili della nazionale di pallavolo femminile della Slovacchia

SlovacchiaUniformi di gara Casa Trasferta Sport Pallavolo FederazioneSVF ConfederazioneCEV Codice CIOSVK Selezionatore Pavel Bernáth(Under-22) Marek Maličký(Under-20) Peter Adamec(Under-18) Peter Adamec(Under-17) Le selezioni giovanili della nazionale di pallavolo femminile della Slovacchia sono gestite dalla federazione pallavolistica della Slovacchia (SVF) e partecipano ai tornei pallavolistici internazionali per squadre nazionali femminili limitatamente a specifiche classi d'età. Indic...

 

Monumenti romani e romanici di Arles

 Bene protetto dall'UNESCOMonumenti romani e romanici di Arles Patrimonio dell'umanità TipoCulturali Criterio(ii) (iv) PericoloNon in pericolo Riconosciuto dal1981 Scheda UNESCO(EN) Arles, Roman and Romanesque Monuments(FR) Arles, monuments romains et romans Manuale Con la definizione monumenti romani e romanici di Arles si intendono un insieme di monumenti situati nella città di Arles in Francia inseriti nella lista del patrimonio dell'umanità dell'UNESCO. L'area protetta si est...