Now starting BugID with @berendjanwever at @InfiltrateCon #youkillityoueatitpic.twitter.com/oZouw4H2jE
-
Dumb fuzzing yields poor results on browsers today.
@berendjanwever's fuzzers understand the DOM and coordinate to find complex interactions
MemGC in IE made 90% of his use-after-free bugs practically unexploitable. "This took a bite out of my income."
-
-
MemGC is not a cure-all. A few UAFs are still exploitable. He's also finding type confusion, out of bounds reads/writes. UAFs are declining.
-
BugID automatically performs common crash analysis steps. Goal was make more $ by reporting faster to bounty programs.
- 9 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.