Slashdot Mirror
Targeted Fuzzing Is Improving Linux Security, Linus Torvalds Says (iu.edu)
On the sidelines of announcing the fifth release candidate for the Linux kernel version 4.14, Linus Torvalds said fuzzing, which involves stress testing a system by generating random code to induce errors, is helping the community find and fix a range of security vulnerabilities. He wrote: The other thing perhaps worth mentioning is how much random fuzzing people are doing, and it's finding things. We've always done fuzzing (who remembers the old "crashme" program that just generated random code and jumped to it? We used to do that quite actively very early on), but people have been doing some nice targeted fuzzing of driver subsystems etc, and there's been various fixes (not just this last week either) coming out of those efforts. Very nice to see.
I use the crashme program to generate random code. Then I run it through Google translate and self publish on Amazon. Not a bad way to make a living.
"A person is smart. People are dumb, panicky dangerous animals and you know it." - K