#fuzzers
LightNews LightNews
vorsicht2salat.bsky.social
fuzzers hab bissi darauf gewartet bis du ihn siehst hatte im gefühl dass er dir gefällt ahaha
December 13, 2025 at 6:28 PM
nikkibobicky.bsky.social
Gratitudes
1. I got some RQI socks
2. A decent patient assignment
3. Pre-work naps with all the fuzzers
4. I can help Tiana out sometimes wit little things so she can take Tre lunch
5. The social service office for always having candy
December 13, 2025 at 6:04 AM
grantmusic-pdx.bsky.social
Happy holidays anyway mother fuzzers
December 12, 2025 at 11:07 AM
csse-bot.bsky.social
Sairam Vaidya, Marcel B\"ohme, Loris D'Antoni: Bootstrapping Fuzzers for Compilers of Low-Resource Language Dialects Using Language Models https://arxiv.org/abs/2512.05887 https://arxiv.org/pdf/2512.05887 https://arxiv.org/html/2512.05887
December 8, 2025 at 6:35 AM
andreaszeller.bsky.social
This Friday at 11:00 am, I will be giving a talk on "Language-Based Software Testing" at Imperial College in London, covering our latest and greatest in testing systems with highly complex inputs and interactions. Details here: srg.doc.ic.ac.uk/seminars/25-...
Language-Based Software Testing with José Antonio Zamudio Amaya, Marius Smytzek, Valentin Huber, Addison Crump, Alexi Turcotte, and many others Random test input generators (fuzzers) have become the prime detectors of vulnerabilities in software. While generic fuzzers easily adapt to arbitrary programs under test, they offer very little possibilities to control or shape the generated inputs. In this talk, I present FANDANGO, a novel language-based fuzzer that combines grammars with predicates over input elements to produce inputs that satisfy all the given predicates. Examples of what such predicates can express include input format constraints (“The length field should be equal to the length of the payload”) code features (“Any variable used must be declared beforehand”) statistical distributions (“Across all inputs, the voltage field must follow a Gaussian distribution, but never exceed 20 mV”) data collections (“The credit-card-number field should come from the Python faker library”) and more – actually, any property that can be expressed in a Python expression. In our experiments, FANDANGO efficiently solved complex file formats and satisfied demanding predicates, up to full-fledged programming languages as test inputs for compilers. This opens the door towards personalized fuzzing, where testers can make use of their own knowledge and LLM knowledge to very effectively fuzz systems. Includes live demos! Fandango is available at https://fandango-fuzzer.github.io/ Andreas Zeller is faculty at the CISPA Helmholtz Center for Information Security and professor for Software Engineering at Saarland University. His research on automated debugging, mining software archives, specification mining, and security testing has won several awards for its impact in academia and industry. Zeller is an ACM Fellow, holds an ACM SIGSOFT Outstanding Research Award, and has won two ERC Advanced Grants, Europe’s highest funding for individual researchers.
December 3, 2025 at 10:52 AM
andreaszeller.mastodon.social.ap.brid.gy
This Friday at 11:00 am, I will be giving a talk on "Language-Based Software Testing" at Imperial College in London, covering our latest and greatest in testing systems with highly complex inputs and interactions. Details here: https://srg.doc.ic.ac.uk/seminars/25-12-zeller/
Language-Based Software Testing with José Antonio Zamudio Amaya, Marius Smytzek, Valentin Huber, Addison Crump, Alexi Turcotte, and many others Random test input generators (fuzzers) have become the prime detectors of vulnerabilities in software. While generic fuzzers easily adapt to arbitrary programs under test, they offer very little possibilities to control or shape the generated inputs. In this talk, I present FANDANGO, a novel language-based fuzzer that combines grammars with predicates over input elements to produce inputs that satisfy all the given predicates. Examples of what such predicates can express include input format constraints (“The length field should be equal to the length of the payload”) code features (“Any variable used must be declared beforehand”) statistical distributions (“Across all inputs, the voltage field must follow a Gaussian distribution, but never exceed 20 mV”) data collections (“The credit-card-number field should come from the Python faker library”) and more – actually, any property that can be expressed in a Python expression. In our experiments, FANDANGO efficiently solved complex file formats and satisfied demanding predicates, up to full-fledged programming languages as test inputs for compilers. This opens the door towards personalized fuzzing, where testers can make use of their own knowledge and LLM knowledge to very effectively fuzz systems. Includes live demos! Fandango is available at https://fandango-fuzzer.github.io/
December 3, 2025 at 10:53 AM
hackernewsrobot.bsky.social
A Tale of Four Fuzzers
A Tale Of Four Fuzzers
tigerbeetle.com
November 28, 2025 at 7:12 PM
betterhn50.e-work.xyz
A Tale of Four Fuzzers https://tigerbeetle.com/blog/2025-11-28-tale-of-four-fuzzers/ (https://news.ycombinator.com/item?id=46077964)
A Tale Of Four Fuzzers
tigerbeetle.com
November 28, 2025 at 6:59 PM
hnews.southla.social
📰 A Tale of Four Fuzzers

💬 Comments dissect PRNG limits and sampling, while someone fears CSS issues. General vibe: insightful yet frustrated. 🤔

https://news.ycombinator.com/item?id=46077964
November 28, 2025 at 4:45 PM
news.facts.dev
⚡ Hackernews Top story: A Tale of Four Fuzzers
A Tale Of Four Fuzzers
Insights, updates, and technical deep dives on building a high-performance financial transactions database.
tigerbeetle.com
November 28, 2025 at 2:12 PM
A Tale Of Four Fuzzers

Charles Darnay observed that the gate was held by a mixed guard of soldiers and patriots, the latter far outnumbering the former; and that while ingress into the city for peasants’ carts bringing in supplies, and for similar traffic and traffickers, was easy enough, egress,…
A Tale Of Four Fuzzers
Charles Darnay observed that the gate was held by a mixed guard of soldiers and patriots, the latter far outnumbering the former; and that while ingress into the city for peasants’ carts bringing in supplies, and for similar traffic and traffickers, was easy enough, egress, even for the homeliest people, was very difficult.— Complaining about egress fees goes back to at least the French Revolution. Some time ago we overhauled TigerBeetle’s routing algorithm to better handle varying network topologies in a cluster. That turned out to be an interesting case study…
cnznews.com
November 28, 2025 at 1:52 PM
betterhn20.e-work.xyz
A Tale of Four Fuzzers https://tigerbeetle.com/blog/2025-11-28-tale-of-four-fuzzers/ (https://news.ycombinator.com/item?id=46077964)
A Tale Of Four Fuzzers
tigerbeetle.com
November 28, 2025 at 1:29 PM
hackernewsbot.bsky.social
A Tale of Four Fuzzers | Discussion
A Tale Of Four Fuzzers
Insights, updates, and technical deep dives on building a high-performance financial transactions database.
tigerbeetle.com
November 28, 2025 at 1:00 PM
hackernewstop5.bsky.social
A Tale of Four Fuzzers

#HackerNews

<a href="https://tigerbeetle.com/blog/2025-11-28-tale-of-four-fuzzers/" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link" target="_blank" rel="noopener" data-link="bsky">https://tigerbeetle.com/blog/2025-11-28-tale-of-four-fuzzers/
A Tale of Four Fuzzers
November 28, 2025 at 12:32 PM
hnbot.gsuscs.xyz
A Tale of Four Fuzzers

https://tigerbeetle.com/blog/2025-11-28-tale-of-four-fuzzers/
November 28, 2025 at 12:30 PM
viralpique.bsky.social
A Tale Of Four Fuzzers

✨ Explore this awesome post from Hacker News 📖 📂 Category: 💡 Main takeaway: Charles Darnay observed that the gate was held by a mixed guard of soldiers and patriots, the latter far outnumbering the former; and that while ingress into the city for peasants’ carts bringing in…
A Tale Of Four Fuzzers
✨ Explore this awesome post from Hacker News 📖 📂 Category: 💡 Main takeaway: Charles Darnay observed that the gate was held by a mixed guard of soldiers and patriots, the latter far outnumbering the former; and that while ingress into the city for peasants’ carts bringing in supplies, and for similar traffic and traffickers, was easy enough, egress, even&hellip;
viralpique.com
November 28, 2025 at 12:30 PM
hnws.bsky.social
A Tale of Four Fuzzers
L: https://tigerbeetle.com/blog/2025-11-28-tale-of-four-fuzzers/
C: https://news.ycombinator.com/item?id=46077964
posted on 2025.11.28 at 07:11:39 (c=0, p=5)
November 28, 2025 at 12:24 PM
hn100.bsky.social
A Tale of Four Fuzzers

Discussion
November 28, 2025 at 12:22 PM
tigerbeetle.com
A Tale Of Four Fuzzers

A case study in applied real world property based testing, by matklad

tigerbeetle.com/blog/2025-11...

#Fuzzing #PBT
November 28, 2025 at 12:00 PM
tyleraking.com
I had to go to West Point yesterday and lemme tell you there is some truth to the rumors of a genetically engineered special forces platoon of chonky squirrels. Those little fuzzers have been doing deadlifts.
November 27, 2025 at 6:36 PM
wedgeophile.bsky.social
good morning fuzzers
November 21, 2025 at 10:31 AM
craftxbox.transfur.social
@Enalys Fuzzers will find your nonstandard ssh port irregardless, save yourself the time of having to manually specify the ssh port every time
November 12, 2025 at 7:54 AM
thefuzzpawtrol.bsky.social
Hi Fuzzers! Meet Rose, our latest senior kitty guest. She loves to sun herself, eats 3 square meals a day, takes her meds like a good girl. She enjoys 90s R&B, gets her news @laist.com 89.3. Currently watching @pbs.org All Creatures Great and Small with her Passport subscription.
#thefuzzpawtrol
November 6, 2025 at 8:12 PM
addisoncrump.info
What is shallow to grammar fuzzers might not be shallow to byte mutator fuzzers e.g.
October 30, 2025 at 5:10 PM
justinschuh.com
And the current code went with checking for a range from -1 to -12, landed by @quidity.bsky.social back in April. There's also a nice comment about how they got to -12.

source.chromium.org/chromium/chr...
Source code comment with the following text: Note that there appears to be no official documentation covering the existence of specific pseudo handle values. In practice it's clear that e.g. -1 is the current process, -2 is the current thread, etc. The largest negative value known to be an issue with DuplicateHandle in fuzzers is -12. Note that there is virtually no risk of a real handle value falling within this range and being misclassified as a pseudo handle.
October 30, 2025 at 2:45 PM