Possibly of interest to the HN crowd, just before this Mudge was (and I think still is) involved in a non-profit named CITL that focuses on performing static an

Possibly of interest to the HN crowd, just before this Mudge was (and I think still is) involved in a non-profit named CITL that focuses on performing static and dynamic analysis (eg fuzzing) to evaluate hardening measures in consumer software. For example, their work on browsers: https://cyber-itl.org/comparisons/comparison.html?comparisonType=browser&operatingSystem=Windows https://cyber-itl.org/comparisons/comparison.html?comparison... It's very interesting work but I haven't seen wide discussion on it so far.