News for hackers. Stuff that matters.
Re:Fuzzing Java in OSS-Fuzz by fhenneke on Wednesday March 10, 2021 @04:11PM (#26416313)
While I agree with most of what you are saying (let's hope that 2021 will finally be "the year of memory-safe languages"), remote code execution issues also affect Java. https://securitylab.github.com/research/securing-the-fight-a... is just one of the latest prominent examples.
Re:Fuzzing Java in OSS-Fuzz by lucb1e on Wednesday March 10, 2021 @04:24PM (#26416458)
Yep, for sure. One of the things we see most frequently leading to code execution is still deserialization... but it's much more rare now, so a step forwards from my point of view.