4 ms·
Nice! One application could be distributed fuzzing, where anyone can partake in fuzzing important software (eg. OpenSSL) by just running a web page in their br
by guidovranken 7y ago
Nice!
One application could be distributed fuzzing, where anyone can partake in fuzzing important software (eg. OpenSSL) by just running a web page in their browser. Native binaries are less suited for this because adequate sandboxing is hard, but the security properties offered by WASM and browsers make this no less secure than running any other web page.
With this, anyone can contribute to the quality of OSS without any technical skills, anonymously and free/cheap. For vendors willing to pay bounties for (OSS) software bugs, their current process can be automated and participation is incentivized. Offering bounties (like Google does now for OSS-Fuzz integrations) for new bugs or code coverage incentivizes development of superior fuzzing/static analysis/symbolic execution tech and submission of custom-made inputs; without a centralized tracking and verification system, this would be much more tedious to organize. WebTorrent might be used for distribution of corpora/new inputs.
- metzmanj 7y agoRight I think WASM offers some nice advantages over native for distributed fuzzing. It's also worth pointing out that Mozilla made a (non-WASM) distributed fuzzing project, virgo: https://github.com/MozillaSecurity/virgo https://github.com/MozillaSecurity/virgo but it appears to be inactive.