Now starting BugID with @berendjanwever at @InfiltrateCon #youkillityoueatitpic.twitter.com/oZouw4H2jE
-
Did I find 1k bugs or 1 bug 1k times? Is this a vuln or a random crash? No one pays for crashes.
@berendjanwever is evaluating 2500 crashes per day on major browsers. This yields about 1 vuln per month. For a sample, check #DailyBug.
-
-
Dumb fuzzing yields poor results on browsers today.
@berendjanwever's fuzzers understand the DOM and coordinate to find complex interactions -
MemGC in IE made 90% of his use-after-free bugs practically unexploitable. "This took a bite out of my income."
- 11 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.