Now starting BugID with @berendjanwever at @InfiltrateCon #youkillityoueatitpic.twitter.com/oZouw4H2jE
-
MemGC in IE made 90% of his use-after-free bugs practically unexploitable. "This took a bite out of my income."
MemGC is not a cure-all. A few UAFs are still exploitable. He's also finding type confusion, out of bounds reads/writes. UAFs are declining.
-
-
BugID automatically performs common crash analysis steps. Goal was make more $ by reporting faster to bounty programs.
-
BugID is a wrapper around CDB on Windows. It is similar to !exploitable but with more useful output. !exploitable was never useful for him.
- 8 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.