News for hackers. Stuff that matters.
Re:FuzzOS – an operating system which is designed specifical... by AgloeDreams on Monday December 07, 2020 @03:15PM (#25336795)
Can someone tell me what the living heck is `Fuzzing`?

I read this twice and I really don't have a single clue other than it having something to do with or requiring fast memory?

Re:FuzzOS – an operating system which is designed specifical... by mehrdadn on Monday December 07, 2020 @03:28PM (#25336989)
Re:FuzzOS – an operating system which is designed specifical... by SAI_Peregrinus on Monday December 07, 2020 @03:35PM (#25337083)
Testing code via semi-random inputs[1]. The most common fuzzers, AFL-Fuzz[2] and libFuzzer[3] are coverage-guided: they compile the program with special instrumentation to determine code coverage, then call the program repeatedly, changing the inputs via genetic algorithm to try to maximize the code paths executed. When unexpected behavior is observed (typically the test harness crashing) the fuzzer saves the test's input for future use.

Basically automatic generation of test case inputs. It's non-deterministic, so it won't always find problems, but it can save a lot of manual effort.

[1] https://en.wikipedia.org/wiki/Fuzzing [2] https://lcamtuf.coredump.cx/afl/ [3] https://www.llvm.org/docs/LibFuzzer.html

Re:FuzzOS – an operating system which is designed specifical... by davidw on Monday December 07, 2020 @05:06PM (#25338300)
For an interesting, similar idea, see also:

https://en.wikipedia.org/wiki/QuickCheck

Re:FuzzOS – an operating system which is designed specifical... by lambda_obrien on Monday December 07, 2020 @03:36PM (#25337104)
Fuzzing: give a program structured random garbage as input and see what happens, then fix the resulting bugs.
Re:FuzzOS – an operating system which is designed specifical... by Forge36 on Monday December 07, 2020 @04:56PM (#25338170)
Originally: for each terminal program, pass every file as input. If crash results: document it.

Effectively: random inputs to achieve unexpected results. It's now come to mean "random data testing of an API"

Re:FuzzOS – an operating system which is designed specifical... by amelius on Monday December 07, 2020 @07:15PM (#25339666)
Here is a tutorial I found: https://fuzzing-project.org/tutorial1.html