HNHacker News
TopNewBestAskShowJobs

halbecaf

10 karma · joined December 2, 2016

submissionscomments
halbecaf··on OSV and helping developers fix known vulnerabilities
Actual documentation: https://google.github.io/osv-scanner/experimental/guided-rem...
halbecaf··on Vulnerability scanner written in Go that uses osv.dev data
OSV lead here.

This isn't available yet, but we're working on exactly this in two ways:

1. Extending our API to detect vendored C/C++ code by building an file hash index 2. Building a high quality C/C++ vulnerability database.

You can follow the two linked issues here: https://github.com/google/osv-scanner/issues/82 for updates!

halbecaf··on Announcing OSS-Fuzz: Continuous Fuzzing for Open Source Software
Project Zero has reported plenty of bugs in Google software: https://bugs.chromium.org/p/project-zero/issues/list?can=1&q...