In Defense of Erlang: Through Magic of Offence
Whoa whoa whoa.<p>"Only" exploit developer?<p><a href="https://github.com/zv/otp" rel="nofollow">https://github.com/zv/otp</a><p>I was writing the fuzzing machinery for the BEAM instruction decoder AND EPMD while you were ... doing much more impressive stuff.<p>Besides paragons of industry like myself, The "CUTER" guy (known by his friends as "Greek Fire") has done considerable work in manually verifying and pretend model checking large swaths of the Erl OTP code, despite being less "vulnerable" than the biffer or port-mapper (for example), <i>DOES</i> happen to comprise the vast majority of the OTP code base.<p>Other people have done admirable work in reviewing OTP, patching remotely exploitable holes and advancing our security posture. Unsurprisingly this breed of hacker doesn't bother registering a catchy domain name with a dope live stunt-hacking demo to Wired.<p>This is to say you've never heard of them.