Hacker News Reader

i actually realized that the original fix to the int overflow was UB, not tim.

as usual, tim gets all the credit ;)

(i mean, he did send the email)

mytummyhertzon Ask HN: What is the emerging state of the art in fuzzing techniques?

shameless self plug: https://www.nccgroup.trust/us/about-us/newsroom-and-events/b...

allows you to run AFL on arbitrary VMs. so far we've used it to find some Linux vulnerabilities, and are starting to find stuff in other operating systems too. and we're just getting started :)

mytummyhertzon Project Triforce: Run AFL on Everything

i've actually used AFL to find some input parsing bugs in Perl, Python, and Ruby.

Perl was the team who fixed them the fastest.

none of the teams (rightly) considered these particularly high impact.

mytummyhertzon Project Triforce: Run AFL on Everything

NCC = matasano + iSec + intrepidus group

mytummyhertzon Project Triforce: Run AFL on Everything

checkout the details of the project, the idea is that you can run AFL on arbitrary VMs (like your rails VM)! just need to have your test cases, your userland harness, and the addresses to monitor for "panics"

mytummyhertzon Abusing Privileged and Unprivileged Linux Containers

awesome! glad to hear :D

mytummyhertzon Abusing Privileged and Unprivileged Linux Containers

yup, everything here was disclosed previously

mytummyhertzon Abusing Privileged and Unprivileged Linux Containers

that's a weird way to spell hilarious

edit: (original comment this was in reply to said 'that's an unfortunate username')

mytummyhertzon Abusing Privileged and Unprivileged Linux Containers

author here. hi world!

mytummyhertzon Chess: Who will win in this riveting game of Math.random() vs. Math.random()?

$100 to the first person to calculate the expected probability of a checkmate

mytummyhertzon C++ – From goto to std::transform