3 ms·
> what alternatives are there to making the libraries it checks more secure besides rewriting them in another language? I'm not sure what you mean by rewriting
by tanin 10y ago
> what alternatives are there to making the libraries it checks more secure besides rewriting them in another language?
I'm not sure what you mean by rewriting a library.
For example, if a library is written in Ruby, fuzzing might not be suitable. you shouldn't rewrite it in C, so that you can fuzz it. (I thinkI misunderstand your point here. Please correct me.)
If we want to discover vulnerabilities in Ruby, we should fuzz the Ruby VM directly. We shouldn't fuzz a Ruby library.