They pointed Anthropic’s scanner at their library and woke up to 36 bugs, 6 of them security holes
The maintainers of the Pion WebRTC library added its DTLS package to Anthropic’s open source scanner. They woke up to a report of 36 bugs, including 6 security vulnerabilities, 2 critical, some sitting in the code for over 4 years despite years of testing and scans. Fixes went in the same project.
How it works
- The maintainers add Pion DTLS to the scanner
- The scanner runs over the code
- They wake up to a report of 36 bugs, 6 of them security vulnerabilities
- They review them by hand and the fixes go in
Why it’s worth knowing
Bugs that survived 4 years of testing and security scans were sitting in a report the next morning.
Where it’s from
Summarized from a public post on news.ycombinator.com. See the original ↗