Jason Kratzer retweeted
We've successfully deployed ThreadSanitizer for Firefox - If you are working on multi-threaded C/C++ code, you might be interested in our results and experiences: hacks.mozilla.org/2021/04/el… #tsan #sanitizers #fuzzing
Jason Kratzer retweeted
How we are fuzzing Firefox? We described the whole pipeline:
hacks.mozilla.org/2021/02/br…
Jason Kratzer retweeted
To reduce the delay in getting bugs fixed, @pyoor_
and the @Mozilla fuzzing team automated as much of the process as possible. This effort resulted in the development of Bugmon. 🪲💻hacks.mozilla.org/2021/01/an…
Jason Kratzer retweeted
The recording of my talk "The Human Component in Bug Finding" at #FuzzConEurope2020 is now available: youtube.com/watch?v=ifc2C5fL… Deploying #fuzzing in your company? Then this might be relevant to you. Thanks to @CI_GmbH for organizing the conference!
Verifying myself: I am jkratzer on Keybase.io. 9AF2vCvteY-MY81f7jIJ-bGfd0D9g5Ep-CLy / keybase.io/jkratzer/sigs/9AF…
Jason Kratzer retweeted
This is a good read for everyone in security, in particular (but not only) for researchers. The result is both shocking and educational. Thanks to my friends at @CISPA for doing this highly valuable work. #fuzzing #security #research #validation
What is it that makes modern fuzzers successful? (Hint: It might not be what you think, and this raises questions.)
andreas-zeller.blogspot.com/…
Jason Kratzer retweeted
Our team has released the Grizzly Browser Fuzzing Framework.
blog.mozilla.org/security/20…
Jason Kratzer retweeted
A Windows kernel bug (DirectX) I discovered was fixed in the latest MS patches.
Found via a custom fuzzer-pretty small and simple. Just targeted at very specific parts of the code
portal.msrc.microsoft.com/en…
Jason Kratzer retweeted
Implemented a Python3 bridge for libFuzzer that allows you to implement custom mutators in Python. Initial prototype up at github.com/MozillaSecurity/l…, work in progress, but any feedback is welcome :) #fuzzing #libfuzzer
Jason Kratzer retweeted
Fun with the new 3D printer, duplicating key from picture (or, what happens if you give decoder free time😇) youtube.com/watch?v=kUD_7p7u…
Jason Kratzer retweeted
We couldn't be more excited to see the first major @rustlang components from Servo landing alongside all the other great work in @firefox #Quantum! Enjoy the new CSS styling and other improvments - next up, #WebRender. "Steal" all the things! xitter.cf/firefox/status/9304351…
Close to 7 million lines of changed code later and we present the BRAND NEW FIREFOX.
Fast, fierce & for good.
mzl.la/2jolNon
Jason Kratzer retweeted
Close to 7 million lines of changed code later and we present the BRAND NEW FIREFOX.
Fast, fierce & for good.
mzl.la/2jolNon
Jason Kratzer retweeted
Next week we’re shipping the new Firefox. 🚢 Literally.
Get on board and get to what you love faster (in both the browser & this boat in NYC).
thebolditalic.com/a-boat-a-b…
Jason Kratzer retweeted
Our pacsec 2017 slides<<From Out of Memory to Remote Code Execution>> speakerdeck.com/yukichen/fro…
Can someone please explain #trevorforget? You know... for a friend of mine.
Jason Kratzer retweeted
Everything you've always wanted to know about Browser Security, now in one white paper from @X41Sec!
blog.skylined.nl/20170919001…
Jason Kratzer retweeted
#CCS17 paper HexType: Efficient Detection of Type Confusion Errors for C++ is out. Also, supporting Firefox is hard nebelwelt.net/publications/f…
Jason Kratzer retweeted
I found the best bug to exploit ever:
c1* o = new c1(a1)
((c2*)o)->m(a2)
where a1&2, c1&2 and m are all attacker controlled. seriously.
Jason Kratzer retweeted
Replying to @pyoor_ @hackfest_ca
yup, corelan-training.com/Find%20… (or just corelan-training.com)














