2026-07-28 16:16 UTC
@zimzat@mastodon.social No one wants to fund it is what I think.
Suhosin did something like this for PHP, now it's just jvoisin maintaining snufflepagus: https://github.com/jvoisin/snuffleupagus
I don't remember if there was something similar for other languages. Grsecurity for the Linux Kernel, that's the three I know :/
Replies (2)
-
@em_and_future_cats@mastodon.social 2026-07-28 18:35
@drwhax@infosec.exchange @zimzat@mastodon.social Ohh my goodness!!! TIL : there is something actually called “snufflepagus” and it’s not just something me and my sisters made up!😹
-
@zimzat@mastodon.social 2026-08-09 18:56
@drwhax@infosec.exchange Who is going to provide the models and the time necessary for people running it and creating fixes? This is asking F/OSS maintainers to donate their personal time and money to Anthropic and OpenAI. This won't be a one-time cost either: every time a change is made it would have to be re-run and outputs filtered for false positives. This creates a tax on society without solving underlying problems. Why can we fund this but not efforts to eliminate the security holes entirely?