Now starting BugID with @berendjanwever at @InfiltrateCon #youkillityoueatitpic.twitter.com/oZouw4H2jE
-
@berendjanwever is evaluating 2500 crashes per day on major browsers. This yields about 1 vuln per month. For a sample, check#DailyBug.
Dumb fuzzing yields poor results on browsers today. @berendjanwever's fuzzers understand the DOM and coordinate to find complex interactions
-
-
MemGC in IE made 90% of his use-after-free bugs practically unexploitable. "This took a bite out of my income."
-
MemGC is not a cure-all. A few UAFs are still exploitable. He's also finding type confusion, out of bounds reads/writes. UAFs are declining.
- 10 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.