Overengineered Scanner vs Dumb Fuzzer

I wrote a vulnerability scanner that abstracts all the predicates in a binary, traverses the callgraph and generates formulae to run then with an SMT solver. I found 1 vuln in 3 days with this tool. He wrote a dumb ass fuzzer and found 5 vulns in 1 day. Good thing I'm not a n00b like that guy.

A three-panel black-and-white comic shows a programmer proudly describing an elaborate vulnerability scanner, then comparing himself to someone who wrote a simple fuzzer that found more vulnerabilities much faster. The punchline is the programmer’s arrogant self-congratulation despite being less effective, mocking overengineering and elitism in cybersecurity.

• @profunctor_io / 600 2018-02-04