Jason Kratzer

Vulnerability Researcher. Tweets are my own.

[Christian Holler @mozdeco]

We've successfully deployed ThreadSanitizer for Firefox - If you are working on multi-threaded C/C++ code, you might be interested in our results and experiences: https://t.co/aiFcITGvOC #tsan #sanitizers #fuzzing

[Sylvestre Ledru @SylvestreLedru]

How we are fuzzing Firefox? We described the whole pipeline:
https://t.co/BSFeekiGxR

[Firefox for Web Developers @FirefoxWebDevs]

To reduce the delay in getting bugs fixed, @pyoor_
and the @Mozilla fuzzing team automated as much of the process as possible. This effort resulted in the development of Bugmon. 🪲💻https://t.co/FOL4NyHQVY

[Christian Holler @mozdeco]

The recording of my talk "The Human Component in Bug Finding" at #FuzzConEurope2020 is now available: https://t.co/usrwv070q0 Deploying #fuzzing in your company? Then this might be relevant to you. Thanks to @CI_GmbH for organizing the conference!

[Jason Kratzer @pyoor_]

Verifying myself: I am jkratzer on https://t.co/n2yXxXnEdc. 9AF2vCvteY-MY81f7jIJ-bGfd0D9g5Ep-CLy / https://t.co/y84jgLOa9w

[Christian Holler @mozdeco]

This is a good read for everyone in security, in particular (but not only) for researchers. The result is both shocking and educational. Thanks to my friends at @CISPA for doing this highly valuable work. #fuzzing #security #research #validation

[Jason Kratzer @pyoor_]

@loremgibson It certainly depends on the role but if we're talking offensive security positions, OSCP and OSCE are the only practical certs that have any weight in my opinion.

[Jason Kratzer @pyoor_]

@loremgibson Ah, that's terrible. Sorry Al.

[Mozilla Security @MozillaSecurity]

Our team has released the Grizzly Browser Fuzzing Framework.
https://t.co/0woI86KndM

[Rohit Mothe @rohitwas]

A Windows kernel bug (DirectX) I discovered was fixed in the latest MS patches.
Found via a custom fuzzer-pretty small and simple. Just targeted at very specific parts of the code
https://t.co/5YBUMGK5R2

[Christian Holler @mozdeco]

Implemented a Python3 bridge for libFuzzer that allows you to implement custom mutators in Python. Initial prototype up at https://t.co/zW2E0Zb7SM, work in progress, but any feedback is welcome :) #fuzzing #libfuzzer

[Christian Holler @mozdeco]

Fun with the new 3D printer, duplicating key from picture (or, what happens if you give decoder free time😇) https://t.co/AScYFejWrv

[Servo @ServoDev]

We couldn't be more excited to see the first major @rustlang components from Servo landing alongside all the other great work in @firefox #Quantum! Enjoy the new CSS styling and other improvments - next up, #WebRender. "Steal" all the things! https://t.co/dQkzDcUFoR

[Firefox 🔥 @firefox]

Close to 7 million lines of changed code later and we present the BRAND NEW FIREFOX.

Fast, fierce & for good.

https://t.co/jNYcP3XFMy

[Firefox 🔥 @firefox]

Next week we’re shipping the new Firefox. 🚢 Literally.

Get on board and get to what you love faster (in both the browser & this boat in NYC).

https://t.co/SxlRwBbWaq

[Yuki Chen @guhe120]

Our pacsec 2017 slides<<From Out of Memory to Remote Code Execution>> https://t.co/EuKl6Kd2tg

[Jason Kratzer @pyoor_]

Can someone please explain #trevorforget? You know... for a friend of mine.

[∫КჄ⎩∣⋂ᕮᗤ @berendjanwever]

Everything you've always wanted to know about Browser Security, now in one white paper from @X41Sec!

https://t.co/hnJzqaxCe5

[Mathias Payer @gannimo]

#CCS17 paper HexType: Efficient Detection of Type Confusion Errors for C++ is out. Also, supporting Firefox is hard https://t.co/g8u1MZGCVi