Post #1919868
2026-04-08 14:21 UTC
@whitequark @tef fair. my experience is that "oh neat, I wonder what would happen if I ran it on X" is a powerful force. every time there's some new fuzzing or SAST toy people wanna throw it at everything to see what drops out, and that often results in more bugs being found simply because nobody had bothered on that target before. they could've been found with the prior versions of the new toys, it's just that the new shiny got someone to run it.
Replies (2)
-
@whitequark@social.treehouse.systems 2026-04-08 14:22
@gsuberland @tef people definitely do run a lot of fuzzers on e.g. curl
-
@gsuberland@chaos.social 2026-04-08 14:22
@whitequark @tef when it's something like the linux kernel or android or chromium then of course this doesn't apply.