OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Dailydave] Month of Kernel Bugs and fsfuzzer release (0.6)

From: Evgeny Legerov (admingleg.net)
Date: Tue Oct 24 2006 - 13:04:16 CDT


>Quoting "L.M.H." <lmhinfo-pull.com>:

> On 10/24/06, Evgeny Legerov <admingleg.net> wrote:
> > Hi,
> >
> > I do not like this idea but why not to start the "month of kernel bugs"
> today?
>
> What's wrong with it? Besides giving the stuff out for free instead of
> selling exploits.

As far as "filesystem fuzzing" goes, a trivial binary fuzzer by Ilja van
Sprundel may help you to find a few kernel bugs:
http://www.digitaldwarf.be/products/mangle.c

> The point for letting it happen on November is that starting it today
> doesn't make sense. It wouldn't be the Month of Kernel Bugs. And this
> way I give time to those interested on contributing for getting some
> nice work done.
>
> Another point: things take time to get well done and organized. It's
> not like 'I got a bug, woot, let's go send it to full-disclosure'.
> Fortunately, MoKB isn't a rant, thus it needs some work before it's
> suitable for launch. Bugs need to be briefly documented,
> double-checked, etc. And If I have the time, I'll provide patches and
> try to send them through the appropriate people.
>
> Cheers.
>
>

--
Best regards,
Evgeny Legerov

_______________________________________________
Dailydave mailing list
Dailydavelists.immunitysec.com
http://lists.immunitysec.com/mailman/listinfo/dailydave