3 ms·
I was fascinated by the link[1] in this line "As a result, instead of being hostile to fuzzing, Firefox developers actively help me fuzz their code." It almost
by Lazare 11y ago
I was fascinated by the link[1] in this line "As a result, instead of being hostile to fuzzing, Firefox developers actively help me fuzz their code."
It almost reads like a parody, but it's clearly quite serious; a detailed, thoughtful discussion of how you can ensure your continued ability to ship buggy products. (I know, that's not how the authors see it. But I know which philosophy I hope the people developing the software I have to use have, and it looks a lot more like Firefox than RIM.)
[1]: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2014/january/introduction-to-anti-fuzzing-a-defence-in-depth-aid/ https://www.nccgroup.trust/uk/about-us/newsroom-and-events/b...
- WalterGR 11y agoAnd in the meantime: Over the last 11 years, these fuzzers have found 6450 Firefox bugs, including 790 bugs that were rated as security-critical.