←back to thread

698 points jgrahamc | 1 comments | | HN request time: 0.199s | source
Show context
lkbm ◴[] No.20423117[source]
> In the last few years we have seen a dramatic increase in vulnerabilities in common applications. This has happened due to the increased availability of software testing tools, like fuzzing for example (we just posted a new blog on fuzzing here).

So security/debugging tools increased the number of [discovered/exploited] vulnerabilities, because developers don't use them. Only malware developers and third-party security researchers take the time to test security.

replies(1): >>20423139 #
1. buildzr ◴[] No.20423139[source]
Yup, unless you're a seriously security or stability focused company you don't even use basic stuff like static analysis, let alone fuzzing. Tools for these are often either expensive, hard to use or both.