Fuzzing for bugs yields poor results on offense. Too many other people looking with same tools, long dev time. #youkillityoueatit
George+Robert making the case for hunting reliable, arch-agnostic logic flaws. Revealing 1 logic flaw doesn't always disclose others.
-
-
Talking from experience with pwn2own
#youkillityoueatitpic.twitter.com/1fZFKHpnov
-
How do you find logic flaws? In a word, experience. Lots of vague advice: try threat modeling, identify trust boundaries, think really hard.
- 6 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.