andrei

6 ms·

1.
by andrei 3y ago
just link to the real thing :) [0] [0]: https://twitter.com/nealagarwal/status/1747284257582506102
2.
by andrei 3y ago
facepalm I read that paragraph, but my brain skipped that sentence for some reason. Thanks for clarifying
3.
by andrei 3y ago
How is this different than just turning your TV off? I feel like I'm missing something
4.
by andrei 4y ago
Somewhat relevant: https://tonsky.me/blog/disenchantment/
5.
by andrei 4y ago
As of go 1.18, fuzzing is built into the toolchain itself, and is what we're using in this post. We go over the basics here [0], if you'd like to start at the beginning [0]: https://blog.fuzzbuzz.io/go-fuzzing-basi
6.
by andrei 4y ago
It's much more common than you may think - especially at larger organizations where engineers go "off-script" frequently. That being said, we wanted to highlight an example of how fuzzing can be applied to a typical (albeit,
7.
by andrei 4y ago
A lot of folks we talk to think fuzzing is only useful for finding memory leaks in C++ programs, so we wanted to show how adding a single fuzz test to your API can find SQL injection and other logic bugs. Would love to hear others' exp
8.
Fuzzing Go APIs for SQL Injection(blog.fuzzbuzz.io)
64 points by andrei 4y ago|22 comments
9.
by andrei 4y ago
> 2. What measures is Oven taking to proactively detect and mitigate vulnerabilities? (e.g.: fuzzing, audits, bug bounties) We're huge fans of bun at Fuzzbuzz (waiting for it to get a bit more production-ready). If Jarred's int
10.
House passes bill that DoD software can’t have any CVEs(twitter.com)
19 points by andrei 4y ago|9 comments
11.
Advanced Go Fuzzing Techniques(blog.fuzzbuzz.io)
2 points by andrei 4y ago|0 comments
12.
by andrei 4y ago
I've heard this talked about before, and I believe there's a phrase for it, but I don't remember. Do you happen to know?
13.
by andrei 5y ago
Good catch :) fixed!
14.
by andrei 5y ago
It does! Fuzzing actually started off as a tool built by security researchers to find vulnerabilities in parsers, and other complex codebases, usually written in C/C++ (looking for memory bugs). So anything that deals with untrusted bi
15.
Go Fuzz Testing(blog.fuzzbuzz.io)
114 points by andrei 5y ago|22 comments
16.
by andrei 5y ago
This was a big reason for why our entire eng team moved to linux
17.
Fuzzbuzz (YC W19) Is Hiring a Security Dev Advocate, Full Stack/Back End Eng(angel.co)
1 points by andrei 5y ago
18.
Fuzzbuzz (YC W19) Is Hiring a Full Stack Engineer and Developer Advocate(angel.co)
1 points by andrei 5y ago
19.
Fuzzbuzz (YC W19) Is Hiring Full Stack Engineers (Reacty/Go) in SF Bay Area(angel.co)
1 points by andrei 5y ago
20.
by andrei 5y ago
I think this downplays things quite a bit. I grew up as a middle class immigrant in Canada. My parents have office jobs, but basically 0 connections (certainly not the ones you're implying you need to raise). In university (which I pai
21.
by andrei 5y ago
Part 1 here: https://sthbrx.github.io/blog/2021/03/04/fuzzing-grub-part-1...
22.
Fuzzing Grub, part 2: Going Faster(sthbrx.github.io)
1 points by andrei 5y ago|1 comments
23.
Fuzzbuzz (YC W19) is hiring C/C++ Systems Engineer to work on our fuzzing engine(angel.co)
1 points by andrei 5y ago
24.
by andrei 5y ago
Should add the date to the title: (2017)
25.
by andrei 5y ago
No reason to be ashamed, it's still a fairly niche concept. We're huge fans of it though. We'll definitely be writing an in-depth post about it in the coming weeks/months.
26.
by andrei 5y ago
>Sure, but one thing I don’t understand is why fuzzing is not used more often for testing basically any pure function [...] Agreed 100%, and is actually what we encourage people to do. Since this is an intro article though, we wanted to
27.
by andrei 5y ago
Argh, this is the paper I meant to link: https://arxiv.org/pdf/2008.06537.pdf (Updated the above comment as well)
28.
by andrei 5y ago
Basic fuzzers can surprisingly go a long way. Barton Miller (the professor who first coined the term fuzzing), actually wrote a paper last year [0] where he just ran a very basic fuzzer against a bunch of common UNIX tools. Even after all t
29.
What Is Fuzz Testing?(blog.fuzzbuzz.io)
72 points by andrei 5y ago|20 comments
30.
by andrei 6y ago
literally dozens of us!

More ›