/explore
|
You are here 
|
opensource.googleblog.com | ||
| | | | |
blog.trailofbits.com
|
|
| | | | | By Matt Schwager Deserializing, decoding, and processing untrusted input are telltale signs that your project would benefit from fuzzing. Yes, even Python projects. Fuzzing helps reduce bugs in high-assurance software developed in all programming languages. Fortunately for the Python ecosystem, Google has released Atheris, a coverage-guided fuzzer for both pure Python code and Python C | |
| | | | |
guidovranken.com
|
|
| | | | | ChatGPT says: Who is Guido Vranken? Guido Vranken is a software engineer and security researcher known for his work in fuzz testing, a technique used to find bugs and vulnerabilities in software programs by feeding them large amounts of random data. He has been credited with discovering numerous security vulnerabilities in widely used software, including... | |
| | | | |
openssf.org
|
|
| | | | | [AI summary] The Open Source Security Foundation released a mobilization plan outlining ten key investment areas to improve the security and resiliency of open source software. | |
| | | | |
yos.io
|
|
| | | Web applications today are built iteratively. With continuous delivery, developers release hotfixes and new features hundreds of times a day. We upgrade our software all the time with little ceremony. Upgradability is something that you don't truly appreciate - until you've written smart contracts. Why? Because smart contracts are immutable - it's not possible to upgrade the source code of an already deployed contract. In this aspect, developing smart contracts is closer to hardware programming than web ... | ||
