OSS-Fuzz

In this article I demonstrate how to fuzz test floating point code using libFuzzer.

Posted by Tavis Ormandy, Project Zero Introduction This is an unusual blog post. I normally wri...

Posted by Tavis Ormandy, Project Zero Introduction This is an unusual blog post. I normally wri...

OSS-Fuzz - continuous fuzzing for open source software. - google/oss-fuzz

Trail of Bits is excited to introduce Ruzzy, a coverage-guided fuzzer for pure Ruby code and Ruby C extensions. Fuzzing helps find bugs in software that processes untrusted input. In pure Ruby, these bugs may result in unexpected exceptions that could lead to denial of service, and in Ruby C extensions, they […]

AI is finding bugs faster, researchers pile on the moment one drops, and registries ship malware by the hundred-thousand. Defenders are caught between two contradictory imperatives. The fix is architectural, not temporal.

The essence of software engineering is making trade-offs, and sometimesengineers even trade away security for other priorities. When it comes torunning untrusted code from unknown sources, however, exceptionally strongsecurity is simply ...

We announced the Bytecode Alliance nearly a year ago, and since then it has been… quite a year 😬

A lightweight WebAssembly runtime that is fast, secure, and standards-compliant - bytecodealliance/wasmtime

Larry Stefonic of wolfSSL contacted me after he’d noticed my project for fuzzing cryptographic libraries called Cryptofuzz. We agreed that I would write a Cryptofuzz module for wolfSSL. I activated…

Maxime Chevalier-Boisvert requested resources for learning about fuzzingprogramming language implementations on Twitter:

Note: I am cross-posting this article to my personal blog. The original ison the Bytecode Allianceblog.

A lightweight WebAssembly runtime that is fast, secure, and standards-compliant - bytecodealliance/wasmtime

Mozilla has been fuzzing Firefox for a while. It has proven to be one of the most efficient ways to identify quality and security issues.

OSS-Fuzz - continuous fuzzing for open source software. - google/oss-fuzz

A lightweight WebAssembly runtime that is fast, secure, and standards-compliant - bytecodealliance/wasmtime