Go native fuzzing design draft feedback

[Katie Hockman]

Hi everyone!

I'm Katie, and I work with Filippo on the Go security team (previously led the module mirror and checksum database in 2019). I wanted to reach out to all of you specifically to get feedback on a design draft that I've been working on for the past few months, to make fuzzing a first class service for Go. You all have put a lot of thought and effort into this initiative for some time, so I'd appreciate your expertise here with any feedback you can give on the design. I'd also love to hear from any of you as to how you'd like to be involved in this effort in the future, whether that be giving more feedback on design interations, contributing code, etc.

The design draft is published at https://go.googlesource.com/proposal/+/master/design/40307-fuzzing.md. You can mail me directly at ka...@golang.org if you have feedback, or you can respond to this thread.

I haven't posted anything to the public issue tracker yet, since I'd like to get a bit more feedback and make sure we have a solid design before asking for wider public feedback. But I hope to share this more widely soon.

Thanks, and looking forward to hearing from you,

Katie Hockman

[Katie Hockman]

Hi again,

As an update: this design draft ended up getting a lot more public attention than I expected, and since so many people have already seen it and want to give feedback, I went ahead and updated the draft (which is now at https://golang.org/s/draft-fuzzing-design) to direct people to Reddit. However, feel free to still respond to me here, or if you have more detailed comments, we may be able to get in a call to discuss.

Thanks again for your work on fuzzing, and looking forward to working together more.

Katie

--
You received this message because you are subscribed to the Google Groups "golang-fuzzing-proposal" group.
To unsubscribe from this group and stop receiving emails from it, send an email to golang-fuzzing-pr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/golang-fuzzing-proposal/96872d5a-e776-4805-87ad-a2ef58976b18o%40googlegroups.com.

[Katie Hockman]

Hi there,

It's been quite a while since I've reached out, and someone asked for an update in a separate message, so I wanted to take the opportunity to update everyone!

The design draft has had no major changes over the last few months, and the feedback coming in has mostly stopped at this point.

Right now, my focus is on a beta-testable prototype that can demonstrate how this would work. I don't have an exact timeline for when this will be ready, but I'm hopeful that it won't be too long. This isn't going to be the full "MVP" described in golang.org/s/draft-fuzzing-design, but should help developers gain a better understanding of how this would work and allow them to give more concrete feedback about the UX. The work for this is being done in a dev branch of the go repo.

It's still too early for others to start sending PRs, but I have plans to open that up in the not too distant future. I want to make sure there is a solid foundation of code in place first, and a thorough list of features that need to be built out and polished before more people start contributing.

I still welcome any remaining feedback you or others have on the design as it stands today, and I'm excited to hear additional feedback once people start playing around with a demo.

Thanks,

Katie