Oliver Chang

@halbecaf

halbecaf.bsky.social Senior Staff Eng @ Google DeepMind. Former: founder of OSV.dev, lead/co-founder for OSS-Fuzz.

Sydney, Australia

Joined June 2016

Replies Reposts Media

Oliver Chang
@halbecaf
Oct 6, 2025
Really excited to finally announce CodeMender! As part of this we've already submitted and upstreamed several patches to OSS projects via OSS-Fuzz. Check out our post at: deepmind.google/discover/blog/… There will be more technical details and exciting announcements to come!
Introducing CodeMender: an AI agent for code security
From deepmind.google
Oliver Chang
@halbecaf
Jan 29, 2025
OSV-Scanner has just released the first beta for V2, a major update that includes significant new features, including layer-aware container scanning, remediation for pom.xml, new HTML output and more. osv.dev/blog/posts/osv… Please try it out and give us feedback!
Oliver Chang
@halbecaf
Jan 14, 2025
Happy new year! OSV had a lot of great progress in 2024, from new ecosystem adoption, API improvements, and scanner feature development! We just published a blog about these and our 2025 plans here: osv.dev/blog/posts/202… !
Oliver Chang
@halbecaf
Nov 20, 2024
New blog post about OSS-Fuzz AI-powered fuzzing is live! We talk about what went into making LLMs work well enough for this use case to find 26 new vulnerabilities (including a CVE in OpenSSL), as well as what else we have planned to make this better.
security.googleblog.com
Leveling Up Fuzzing: Finding more vulnerabilities with AI
Posted by Oliver Chang, Dongge Liu and Jonathan Metzman, Google Open Source Security Team Recently, OSS-Fuzz reported 26 new vulnerabilities...
Oliver Chang
@halbecaf
Nov 3, 2024
Red Hat joins OSV! openssf.org/blog/2024/11/0… Combined with Ubuntu, Chainguard, and SUSE adopting OSV this year, OSV.dev has really started to become a comprehensive vulnerability source for not only language packages, but also Linux distros!