Viewing profile — andrei

just link to the real thing :) [0] [0]: https://twitter.com/nealagarwal/status/1747284257582506102

facepalm I read that paragraph, but my brain skipped that sentence for some reason. Thanks for clarifying

How is this different than just turning your TV off? I feel like I'm missing something

Somewhat relevant: https://tonsky.me/blog/disenchantment/

As of go 1.18, fuzzing is built into the toolchain itself, and is what we're using in this post. We go over the basics here [0], if you'd like to start at the beginning [0]: https:…

It's much more common than you may think - especially at larger organizations where engineers go "off-script" frequently. That being said, we wanted to highlight an example of how …

A lot of folks we talk to think fuzzing is only useful for finding memory leaks in C++ programs, so we wanted to show how adding a single fuzz test to your API can find SQL injecti…

> 2. What measures is Oven taking to proactively detect and mitigate vulnerabilities? (e.g.: fuzzing, audits, bug bounties) We're huge fans of bun at Fuzzbuzz (waiting for it to ge…

I've heard this talked about before, and I believe there's a phrase for it, but I don't remember. Do you happen to know?

Good catch :) fixed!

It does! Fuzzing actually started off as a tool built by security researchers to find vulnerabilities in parsers, and other complex codebases, usually written in C/C++ (looking for…

This was a big reason for why our entire eng team moved to linux

I think this downplays things quite a bit. I grew up as a middle class immigrant in Canada. My parents have office jobs, but basically 0 connections (certainly not the ones you're …

Part 1 here: https://sthbrx.github.io/blog/2021/03/04/fuzzing-grub-part-1...