gannimo

3 ms·

1. 1.▲
   From "What the Fuzz?" To "All the Fuzz " (Keynote Fuzzing Workshop NDSS'26)(youtube.com)

   1 points by gannimo 5mo ago|0 comments
2. 2.▲
   Subscription bombing attacks: patterns, dark web services, and mitigations(cacm.acm.org)

   1 points by gannimo 6mo ago|0 comments
3. 3.▲
   by gannimo 2y ago

   We are forcing RTTI for all classes used in casts, some light code changes are required for this that our compiler will hint at.
4. 4.▲
   by gannimo 2y ago

   Our prototype is at https://github.com/HexHive/typepp/ so you can run it in your testing environment
5. 5.▲
   by gannimo 2y ago

   [One of the authors here] Type++ analyzes all application code and infers which classes are ever cast. All of those classes are adapted to include type information (in the form of an RTTI field). All casts are then changed into explicit cas
6. 6.▲
   by gannimo 7y ago

   TBH, I don't expect much more from large corporations. From an economical standpoint, the cost of fixing the bug is higher than the lost revenue if I move my business somewhere else. The engineer and open source enthusiast in me still
7. 7.▲
   Expedia: From software bug to customer service nightmare, a modern Odyssey(nebelwelt.net)

   2 points by gannimo 7y ago|2 comments
8. 8.▲
   Software Security: Principles, Policies, and Protection(nebelwelt.net)

   4 points by gannimo 8y ago|0 comments
9. 9.▲
   by gannimo 13y ago

   https://en.wikipedia.org/wiki/Die_Gedanken_sind_frei Unfortunately not.