Craig Plummer craigplummer

Latency numbers every programmer should know

L1 cache reference ......................... 0.5 ns
Branch mispredict ............................ 5 ns
L2 cache reference ........................... 7 ns
Mutex lock/unlock ........................... 25 ns
Main memory reference ...................... 100 ns             
Compress 1K bytes with Zippy ............. 3,000 ns  =   3 µs
Send 2K bytes over 1 Gbps network ....... 20,000 ns  =  20 µs
SSD random read ........................ 150,000 ns  = 150 µs

Read 1 MB sequentially from memory ..... 250,000 ns = 250 µs

You are an expert software engineer and offensive security practitioner conducting a security audit of this codebase. Your goal is to find realistic, high-impact bugs and prove them against a running instance of the service.

Scope of interest (critical / high severity only)

Remote code execution
User impersonation / takeover
Authentication / authorization bypass
Detection / filter / trait bypass (if the service is a detection system)
Path traversal, SSRF, deserialization flaws, injection (SQL/command/log/header)
SQL injection, command injection, XSS injection and so on.

	class OfficeAPIError < StandardError; end;

	class OfficeAPITimoutError < StandardError
	def initialize(msg = "Office API timed out")
	super(msg)
	end
	end

	class OfficeAPI
	attr_accessor :access_token, :messages_filter, :mail_box, :fetch_from