Regulator Ofcom says providers must offer "clear, honest" information to consumers.
from BBC News - Technology https://ift.tt/2Nywhwx
>
Thursday 28 February 2019
Momo challenge: The anatomy of a hoax
The ghoulish meme known as "momo" is a hoax, fact-checkers and charities say.
from BBC News - Technology https://ift.tt/2Vp16q3
>
from BBC News - Technology https://ift.tt/2Vp16q3
>
Bank customers hit by dozens of IT shutdowns
Customers suffer during regular operational and security incidents, BBC analysis of new data reveals.
from BBC News - Technology https://ift.tt/2EBNpib
>
from BBC News - Technology https://ift.tt/2EBNpib
>
New top story on Hacker News: Red Flags in Software Developer Job Descriptions
Red Flags in Software Developer Job Descriptions
94 by webappsecperson | 88 comments on Hacker News.
94 by webappsecperson | 88 comments on Hacker News.
New top story on Hacker News: Launch HN: Fuzzbuzz (YC W19) – Fuzzing as a Service
Launch HN: Fuzzbuzz (YC W19) – Fuzzing as a Service
147 by evmunro | 76 comments on Hacker News.
Hey HN, We’re Everest, Andrei and Sabera, the founders behind Fuzzbuzz ( https://fuzzbuzz.io ) - a fuzzing as a service platform that makes fuzzing your code as easy as writing a unit test, and pushing to GitHub. Fuzzing is a type of software testing that generates & runs millions of tests per day on your code, and is great at finding edge cases & vulnerabilities that developers miss. It’s been used to find tens of thousands of critical bugs in open-source software ( https://ift.tt/2fW71Bd ), and is a great way to generate tests that cover a lot of code, without requiring your developers to think of every possibility. It achieves such great results by applying genetic algorithms to generate new tests from some initial examples, and using code coverage to track and report interesting test cases. Combining these two techniques with a bit of randomness, and running tests thousands of times every second has proven to be an incredibly effective automated bug finding technique. I was first introduced to fuzzing a couple years ago while working on the Clusterfuzz team at Google, where I built Clusterfuzz Tools v1 ( https://ift.tt/2jAJEvW ). I later built Maxfuzz ( https://ift.tt/2IG5rDY ), a set of tools that makes it easier to fuzz code in Docker containers, while on the Coinbase security team. As we learned more about fuzzing, we found ourselves wondering why very few teams outside of massive companies like Microsoft and Google were actively fuzzing their code - especially given the results (teams at Google that use fuzzing report that it finds 80% of their bugs, with the other 20% uncovered by normal tests, or in production). It turns out that many teams don’t want to invest the time and money needed to set up automated fuzzing infrastructure, and using fuzzing tools in an ad-hoc way on your own computer isn’t nearly as effective as continuously fuzzing your code on multiple dedicated CPUs. That’s where Fuzzbuzz comes in! We’ve built a platform that integrates with your existing GitHub workflow, and provide an open API for integrations with CI tools like Jenkins and TravisCI, so the latest version of your code is always being fuzzed. We manage the infrastructure, so you can fuzz your code on any number of CPUs with a single click. When bugs are found, we’ll notify you through Slack and create Jira tickets or GitHub Issues for you. We also solve many of the issues that crop up when fuzzing, such as bug deduplication, and elimination of false positives. Fuzzbuzz currently supports C, C++, Go and Python, with more languages like Java and Javascript on the way. Anyone can sign up for Fuzzbuzz and fuzz their code on 1 dedicated CPU, for free. We’ve noticed that the HN community has been increasingly interested in fuzzing, and we’re really looking forward to hearing your feedback! The entire purpose of Fuzzbuzz is to make fuzzing as easy as possible, so all criticism is welcome.
147 by evmunro | 76 comments on Hacker News.
Hey HN, We’re Everest, Andrei and Sabera, the founders behind Fuzzbuzz ( https://fuzzbuzz.io ) - a fuzzing as a service platform that makes fuzzing your code as easy as writing a unit test, and pushing to GitHub. Fuzzing is a type of software testing that generates & runs millions of tests per day on your code, and is great at finding edge cases & vulnerabilities that developers miss. It’s been used to find tens of thousands of critical bugs in open-source software ( https://ift.tt/2fW71Bd ), and is a great way to generate tests that cover a lot of code, without requiring your developers to think of every possibility. It achieves such great results by applying genetic algorithms to generate new tests from some initial examples, and using code coverage to track and report interesting test cases. Combining these two techniques with a bit of randomness, and running tests thousands of times every second has proven to be an incredibly effective automated bug finding technique. I was first introduced to fuzzing a couple years ago while working on the Clusterfuzz team at Google, where I built Clusterfuzz Tools v1 ( https://ift.tt/2jAJEvW ). I later built Maxfuzz ( https://ift.tt/2IG5rDY ), a set of tools that makes it easier to fuzz code in Docker containers, while on the Coinbase security team. As we learned more about fuzzing, we found ourselves wondering why very few teams outside of massive companies like Microsoft and Google were actively fuzzing their code - especially given the results (teams at Google that use fuzzing report that it finds 80% of their bugs, with the other 20% uncovered by normal tests, or in production). It turns out that many teams don’t want to invest the time and money needed to set up automated fuzzing infrastructure, and using fuzzing tools in an ad-hoc way on your own computer isn’t nearly as effective as continuously fuzzing your code on multiple dedicated CPUs. That’s where Fuzzbuzz comes in! We’ve built a platform that integrates with your existing GitHub workflow, and provide an open API for integrations with CI tools like Jenkins and TravisCI, so the latest version of your code is always being fuzzed. We manage the infrastructure, so you can fuzz your code on any number of CPUs with a single click. When bugs are found, we’ll notify you through Slack and create Jira tickets or GitHub Issues for you. We also solve many of the issues that crop up when fuzzing, such as bug deduplication, and elimination of false positives. Fuzzbuzz currently supports C, C++, Go and Python, with more languages like Java and Javascript on the way. Anyone can sign up for Fuzzbuzz and fuzz their code on 1 dedicated CPU, for free. We’ve noticed that the HN community has been increasingly interested in fuzzing, and we’re really looking forward to hearing your feedback! The entire purpose of Fuzzbuzz is to make fuzzing as easy as possible, so all criticism is welcome.
New top story on Hacker News: Ask HN: How to be productive with big existing code base
Ask HN: How to be productive with big existing code base
134 by maheshs | 105 comments on Hacker News.
I have just started working with one of the client who have existing nodeJS code which they build in last 3 years. Is there any guiding principle which is beneficial while working with existing code base?
134 by maheshs | 105 comments on Hacker News.
I have just started working with one of the client who have existing nodeJS code which they build in last 3 years. Is there any guiding principle which is beneficial while working with existing code base?
Wikipedia article of the day for February 28, 2019
Wikipedia article of the day is Dark Angel (2000 TV series). Check it out: https://ift.tt/2tEjKi5
The phone-makers bringing buttons back
Several phones at MWC are sporting physical keyboards rather than relying on touchscreens.
from BBC News - Technology https://ift.tt/2Ny5u3g
>
from BBC News - Technology https://ift.tt/2Ny5u3g
>
Pokemon: Nintendo announces two new games, Sword and Shield, for the Switch
This is the first 'real' Pokemon game to appear on consoles, following successful titles on handheld and mobile.
from BBC News - Technology https://ift.tt/2Sva4jZ
>
from BBC News - Technology https://ift.tt/2Sva4jZ
>
Wednesday 27 February 2019
OneWeb satellite internet mega-constellation set to fly
A London-based start-up's multi-billion-pound plan would make the web available everywhere on Earth.
from BBC News - Technology https://ift.tt/2Uawqso
>
from BBC News - Technology https://ift.tt/2Uawqso
>
Subscribe to:
Posts (Atom)