alt Hacker NewsThey're saying to do that scan to every diff before release, to see if it finds anything.
Replies
skinfaxi • today at 2:10 AM
The diff yields the patched code which is used to produce the exploit.
They're saying to do that scan to every diff before release, to see if it finds anything.
The diff yields the patched code which is used to produce the exploit.
I believe their point was that:
"How likely is this diff a patch for an existing vulnerability?"
Seems to be an easier question to answer than
"Are there any new vulnerabilities introduced by this diff?"
In other words identifying that a patch is for a vulnerability is typically easier than finding the vulnerability in the first place.