Re:Sshole
by neomantra on Thursday November 05, 2026 @08:58PM
(#50387202)
Wow, both this sucks about musl/Alpine and this is amazing because a random fuzzing hero found it!
Because I've dealt with so many CVEs this year (not this one thankfully), I've made it a point to add fuzzing to my projects, in addition to hardening prompts. The LLMs can find good targets, just like they do tests.
As I was drowning in fuzz, just a couple days ago I whipped up a fuzzing orchestrator to continually work my Golang GitHub projects. It already found some issues; main difference from before is that I'm running it continuously on a cloud box versus periodically in CI/CD. And I have a simple single place to look, with a simple API for LLMs to check too.
Because I've dealt with so many CVEs this year (not this one thankfully), I've made it a point to add fuzzing to my projects, in addition to hardening prompts. The LLMs can find good targets, just like they do tests.
As I was drowning in fuzz, just a couple days ago I whipped up a fuzzing orchestrator to continually work my Golang GitHub projects. It already found some issues; main difference from before is that I'm running it continuously on a cloud box versus periodically in CI/CD. And I have a simple single place to look, with a simple API for LLMs to check too.
https://fuzz.nimbleterminal.com