Vulnerability Researcher. Tweets are my own.

Joined January 2013
Jason Kratzer retweeted
The recording of my talk "The Human Component in Bug Finding" at #FuzzConEurope2020 is now available: youtube.com/watch?v=ifc2C5fL… Deploying #fuzzing in your company? Then this might be relevant to you. Thanks to @CI_GmbH for organizing the conference!
3
21
1
73
Verifying myself: I am jkratzer on Keybase.io. 9AF2vCvteY-MY81f7jIJ-bGfd0D9g5Ep-CLy / keybase.io/jkratzer/sigs/9AF…
1
Jason Kratzer retweeted
This is a good read for everyone in security, in particular (but not only) for researchers. The result is both shocking and educational. Thanks to my friends at @CISPA for doing this highly valuable work. #fuzzing #security #research #validation
What is it that makes modern fuzzers successful? (Hint: It might not be what you think, and this raises questions.) andreas-zeller.blogspot.com/…
1
11
Jason Kratzer retweeted
A Windows kernel bug (DirectX) I discovered was fixed in the latest MS patches. Found via a custom fuzzer-pretty small and simple. Just targeted at very specific parts of the code portal.msrc.microsoft.com/en…
2
3
26
Jason Kratzer retweeted
We couldn't be more excited to see the first major @rustlang components from Servo landing alongside all the other great work in @firefox #Quantum! Enjoy the new CSS styling and other improvments - next up, #WebRender. "Steal" all the things! xitter.cf/firefox/status/9304351…
Close to 7 million lines of changed code later and we present the BRAND NEW FIREFOX. Fast, fierce & for good. mzl.la/2jolNon
3
100
3
257
Jason Kratzer retweeted
Close to 7 million lines of changed code later and we present the BRAND NEW FIREFOX. Fast, fierce & for good. mzl.la/2jolNon
217
2,414
492
4,096
Jason Kratzer retweeted
Our pacsec 2017 slides<<From Out of Memory to Remote Code Execution>> speakerdeck.com/yukichen/fro…
2
250
6
381
Can someone please explain #trevorforget? You know... for a friend of mine.
2
Jason Kratzer retweeted
#CCS17 paper HexType: Efficient Detection of Type Confusion Errors for C++ is out. Also, supporting Firefox is hard nebelwelt.net/publications/f…
1
12
23
I found the best bug to exploit ever: c1* o = new c1(a1) ((c2*)o)->m(a2) where a1&2, c1&2 and m are all attacker controlled. seriously.
2
7
22