openssl/fuzz at master · openssl/openssl

While source code is critical for user autonomy, it isn't required to evaluate software security or understand run-time behavior.

While source code is critical for user autonomy, it isn’t required to evaluate software security or understand run-time behavior. One of the biggest parts of the Free and Open Source Software definitions is the freedom to study a program and modify it; in other words, access to editable source code. I agree that such access is essential; however, far too many people support source availability for the wrong reasons. One such reason is that source code is necessary to have any degree of transparency into how a piece of software operates, and is therefore necessary to determine if it is at all secure or trustworthy.

Intro The architectures of software fuzzing setups that authors of security fuzzing tools had originally implemented were fairly simple. I...

While source code is critical for user autonomy, it isn't required to evaluate software security or understand run-time behavior.