3 ms·
If you wrote a code that contains some bug, usually your your tests won’t catch it either. You’d need a fuzzer instead. But then again, it just doesn’t work t
by trasz 4y ago
If you wrote a code that contains some bug, usually your your tests won’t catch it either. You’d need a fuzzer instead. But then again, it just doesn’t work this way - you can’t write perfect code, you need to follow the principle of least privilege, ie use compartmentalisation.
- water8 4y agoWhat’s the point of compartmentalization, if all your airlocks are broken or unsecured?
- trasz 4y agoIts not compartmentalization if your airlocks are broken or unsecured.
- e12e 4y agoWell, using a fuzzer would probably be a good idea? See eg: > Fuzzing 100+ open source projects with OSS-Fuzz - lessons learned. (2021) https://adalogics.com/blog/fuzzing-100-open-source-projects-with-oss-fuzz https://adalogics.com/blog/fuzzing-100-open-source-projects-... Short hn discussion of post (but project has been featured many times): https://news.ycombinator.com/item?id=28391620 https://news.ycombinator.com/item?id=28391620