Sergey Bronnikov @sergeyb@bsd.network
luzer: A coverage-guided, native Lua fuzzing engine https://github.com/ligurio/luzer | https://lobste.rs/s/pc8zx8 #lua #programming #security #testing
Another one fuzzing engine for Lua is afl-lua. It is an integration of AFL (American Fuzzy Lop) with Lua programming language.
https://github.com/ligurio/afl-lua
It is not feature-rich and effective as luzer (libfuzzer-based), but it is only initial version and I plan to make it sweet too.
Finally published a coverage-guided, native Lua fuzzing engine. I'll do some polishing before a first release, but it's ready for use now.
Some highlights: usage is quite similar to libfuzzer - define a fuzzing target and pass it to a function Fuzz, custom mutator can be defined as a Lua function, structure-aware inputs can be constructed using Fuzzing Data Provider (the same way as in libFuzzer). Moreover, added a code for building custom mutators in Lua for libFuzzer-based targets. Enjoy!
Would be nice to hear feedback!
A huge list with applications that uses telemetry with instructions how to opt it out.
Anyone can help cppcheck by donating CPU (1 core or as many as you like). It is simple:
Download Cppcheck source code and run script.
The script will analyse debian source code and upload the results to a cppcheck server. This is needed both to improve Cppcheck and to detect regressions.
Might make a couple final tweaks, but I'm pretty happy with this.
I present you: "This is fine", a diorama built from a single piece of paper.
"In the context of auditing Pornhub we have identified two critical flaws in PHP’s garbage collection algorithm (c.f. How we broke PHP, hacked Pornhub and earned $20,000)."
https://www.evonide.com/breaking-phps-garbage-collection-and-unserialize/
Specification of TAP version 14 has been published http://testanything.org/tap-version-14-specification.html It's a popular format of software testing results.
If you cannot install the software you want on your own device – you don’t own it. 38 organizations demand the right to access and to reuse hardware https://fsfe.org/news/2022/news-20220427-01.html, full letter to EU Legislators here https://fsfe.org/activities/upcyclingandroid/openletter.html #ecodesign #RightToRepair #freesoftware #nuug
"You can also join our chat channel using IRC (#briar on libera.chat or OFTC) or Matrix. " https://briarproject.org/get-involved/
I'm a bit confused: developers of @briarapp@beta.birdsite.live uses Matrix and IRC for communication, not a Briar application itself. Could someone explain why? Is it due to some limitations of Briar or developers don't want dogfooding?
OpenBSD 6.7 Released
Announce: https://marc.info/?l=openbsd-tech&m=158989760126054&w=2
Release page: openbsd.org/67.html
Changelog: openbsd.org/plus67.html
Dr. Gerard Holzmann, Senior Research Scientist at the Laboratory for Reliable Software, NASA’s Jet Propulsion Laboratory (2009)
https://www.techbriefs.com/component/content/article/tb/features/whos-who/5717
OpenBSD 6.4 released
Announce: https://marc.info/?l=openbsd-announce&m=153987110101242&w=2
What's New: https://www.openbsd.org/64.html
Upgrade Guide: http://www.openbsd.org/faq/upgrade64.html
TIL about Evil, it is an extension for emacs with emulation of Vim features https://www.emacswiki.org/emacs/Evil
"Ah, but Alpine does not use systemd if I am not mistaken.
You are not really Linuxing until you Poettering."
via @cynicalsecurity
Getting rid of the Intel ME https://www.tnhh.net/posts/ezpi4me-intel-me-be-gone.html
Evaluation the effectiveness of Deep Learning for
bug triaging http://bugtriage.mybluemix.net/
