Fuzzing

Most REST APIs ship with two kinds of tests: unit tests that check functions in isolation, and integration tests that walk the happy path. “Create an item, read it back, delete it, get a 204.” Those tests are written by the same people who wrote the code, so they test the inputs those people expected. Nobody writes the test that sends a 65-character name, a quantity of 2^64, or a DELETE for an item that was never created, because nobody thought of it. ...

Every real-time collaborative editor has the same hard problem underneath it. Two people type into the same paragraph at the same moment, possibly while one of them is offline on a train, and when everything reconnects both screens have to end up showing exactly the same text without anyone’s edit vanishing. The family of data structures built to solve that is called a CRDT (Conflict-free Replicated Data Type): a structure designed so that copies of a document (called replicas) can accept edits independently and always merge to the same result, in any order, with no central referee deciding who wins. ...

Revolutionizing Vulnerability Discovery with AI-Powered Fuzzing =========================================================== Introduction Fuzzing is an automated testing technique used to discover security vulnerabilities in software and protocols by providing invalid or unexpected input. With the increasing complexity of systems and the internet of things (IoT), traditional fuzzing methods are becoming less effective. Artificial intelligence (AI) can be used to enhance fuzzing techniques, making them more efficient and effective. In this article, we will explore the concept of fuzzing with AI and its applications in vulnerability discovery. ...