What's got a vast attack surface and runs on Linux? Windows Defender, of course
-
Well done! "Google Project Zero's Windows bug-hunter and fuzz-boffin Tavis Ormandy has given the world an insight into how he works so fast: he works on Linux, and with the release of a personal project on GitHub, others can too. Ormandy's project is to port Windows DLLs to Linux for his vuln tests (“So that's how he works so fast!” Penguinistas around the world are saying). Typically self-effacing, Ormandy made this simple announcement on Twitter...... Ormandy's reason for the project is to let loose fuzzing against Windows-based software, using Linux platforms. “The intention is to allow scalable and efficient fuzzing of self-contained Windows libraries on Linux. Good candidates might be video codecs, decompression libraries, virus scanners, image decoders, and so on,” he writes. Efficiency is the key, with Ormandy writing that on Windows, it's all too slow." What's got a vast attack surface and runs on Linux? Windows Defender, of course • The Register[^]
Later, JoeSox “Write hard and clear about what hurts.” - Ernest Hemingway Last.fm - CPForAndroid++
-
Well done! "Google Project Zero's Windows bug-hunter and fuzz-boffin Tavis Ormandy has given the world an insight into how he works so fast: he works on Linux, and with the release of a personal project on GitHub, others can too. Ormandy's project is to port Windows DLLs to Linux for his vuln tests (“So that's how he works so fast!” Penguinistas around the world are saying). Typically self-effacing, Ormandy made this simple announcement on Twitter...... Ormandy's reason for the project is to let loose fuzzing against Windows-based software, using Linux platforms. “The intention is to allow scalable and efficient fuzzing of self-contained Windows libraries on Linux. Good candidates might be video codecs, decompression libraries, virus scanners, image decoders, and so on,” he writes. Efficiency is the key, with Ormandy writing that on Windows, it's all too slow." What's got a vast attack surface and runs on Linux? Windows Defender, of course • The Register[^]
Later, JoeSox “Write hard and clear about what hurts.” - Ernest Hemingway Last.fm - CPForAndroid++
If this ever becomes more than a research project, you can bet Microsoft will have something to say about it. :)
The difficult we do right away... ...the impossible takes slightly longer.
-
If this ever becomes more than a research project, you can bet Microsoft will have something to say about it. :)
The difficult we do right away... ...the impossible takes slightly longer.
Richard Andrew x64 wrote:
If this ever becomes more than a research project, you can bet Microsoft will have something to say about it. :)
You mean like what they've done over the last 20+ years with WINE? /sarc
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt
