If you're involved in fuzzing on any side (i.e. also developers) I highly recommend this talk about non-technical aspects of making fuzzing useful part of dev process ("ninja style" deployment, "that's not a bug", fuzzblockers, priorities, expectations). I am guilty of all DONTs.https://twitter.com/mozdeco/status/1303998253336326144 …
-
-
Yes, thus Q: how "setup meeting w/ all devs+mgmt,get buy-in & time allocated" recommendation should be adopted for projects like kernel? Such changes are notoriously hard even in corp env, if they are double-notoriously hard, lots of possible improvements aren't happening.
-
You don't approach it from a "we must get a mandate from above" method, that's not how successful open source projects work. To try to do that, would only result in resistance and avoidance as no one likes to be told what to do.
- Pokaż odpowiedzi
Nowa rozmowa -
Wydaje się, że ładowanie zajmuje dużo czasu.
Twitter jest przeciążony lub wystąpił chwilowy problem. Spróbuj ponownie lub sprawdź status Twittera, aby uzyskać więcej informacji.