News for hackers. Stuff that matters.
Re:MsQuic – QUIC Implementation from Microsoft by saagarjha on Wednesday April 29, 2020 @12:41AM (#23015443)
Since this is going in the kernel and is exposed to the network, what kinds of things are you doing to prevent security or reliability bugs due to undefined behavior?

Love the username, by the way :)

Re:MsQuic – QUIC Implementation from Microsoft by slowstart on Wednesday April 29, 2020 @12:55AM (#23015523)
We do extensive testing including stress testing and make use of tooling that can catch bugs early. We also partner with internal security teams to do fuzz testing and security reviews for all networking code. That said, none of the networking stacks deployed widely today are completely immune to security vulnerabilities. Responsible disclosure also plays an important role.
Re:MsQuic – QUIC Implementation from Microsoft by sansnomme on Wednesday April 29, 2020 @01:40AM (#23015769)
Any plans to integrate or collaborate with Project Everest?
Re:MsQuic – QUIC Implementation from Microsoft by __s on Wednesday April 29, 2020 @12:57AM (#23015532)
You can see some of the tooling they're using, .azure outlines CI & /tools has scripts like https://github.com/microsoft/msquic/blob/6fa51a42f69c59748dd...

There'll also be static analysis being thrown at it