4 ms·
Man Yue Mo worked at Semmle (https://blog.sonatype.com/steps-to-responsible-disclosure https://blog.sonatype.com/steps-to-responsible-disclosure) before it was
by mdriley 3y ago
Man Yue Mo worked at Semmle (https://blog.sonatype.com/steps-to-responsible-disclosure https://blog.sonatype.com/steps-to-responsible-disclosure) before it was acquired by GitHub (https://github.blog/2019-09-18-github-welcomes-semmle/ https://github.blog/2019-09-18-github-welcomes-semmle/). That research function has carried on as the GitHub Security Lab.
Semmle built CodeQL, now offered by GitHub (https://docs.github.com/en/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning-with-codeql https://docs.github.com/en/code-security/code-scanning/intro...), which GitHub and Microsoft (see https://www.microsoft.com/en-us/security/blog/2023/11/02/announcing-microsoft-secure-future-initiative-to-advance-security-engineering/ https://www.microsoft.com/en-us/security/blog/2023/11/02/ann...) want to associate with "deep security insight".
So they continue to fund this kind of novel security research, for which security practitioners across industry are grateful.