Now starting BugID with @berendjanwever at @InfiltrateCon #youkillityoueatitpic.twitter.com/oZouw4H2jE
You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
Stages of BugID development: 1. Run tests unattended 2. Don't waste time on known issues 3. Filter by type (filter non-issues) 4. Print $$$
If symbols are available, BugID tries to look up location in Chrome/Firefox src code. Grades UAFs by estimated control of allocations. Neat!
BugID tracks distance between AVs and poison values to estimate control. Works for every bug type. Encoded on "bug id hash", easy to grep.pic.twitter.com/u5370K9VC4
He's collected data on BugID FPs over the last year. Short time between UAF was a typical FP. FNs using BugID are very low.
tl;dr Uses WinDBG, Page Heap for UAF. Relies heavily on symbols. Call stack hash and bug type for id. No src req'd, easy to deploy.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.