Viewing profile — mytummyhertz

i actually realized that the original fix to the int overflow was UB, not tim. as usual, tim gets all the credit ;) (i mean, he did send the email)

shameless self plug: https://www.nccgroup.trust/us/about-us/newsroom-and-events/b... allows you to run AFL on arbitrary VMs. so far we've used it to find some Linux vulnerabilities…

i've actually used AFL to find some input parsing bugs in Perl, Python, and Ruby. Perl was the team who fixed them the fastest. none of the teams (rightly) considered these particu…

NCC = matasano + iSec + intrepidus group :D

checkout the details of the project, the idea is that you can run AFL on arbitrary VMs (like your rails VM)! just need to have your test cases, your userland harness, and the addre…

awesome! glad to hear :D

yup, everything here was disclosed previously

:D

that's a weird way to spell hilarious edit: (original comment this was in reply to said 'that's an unfortunate username')

author here. hi world!

$100 to the first person to calculate the expected probability of a checkmate

am i the only one who thinks the std::transform version is LESS readable than the for loop?

anyone have writeups for any of these CVE's?

so does this mean .length() is also now O(n) ?

unless they are implementing this for fake email addresses, this is TERRIBLE! it makes it super simple to enumerate valid email addresses. patch it to fetch the images on valid+inv…

wow

http://xkcd.com/1240/ that is all

has anyone who knows what they're talking about looked this over? if its correct, it seems like its a pretty huge result