<div dir="auto">John,  I’ve already written an X3D JSON fuzzier so I will check out OWASP.  I thought it was a kind of security checklist, so I’d like to see how it will handle fuzzing.</div><div dir="auto"><br></div><div dir="auto">Thanks!</div><div dir="auto"><br></div><div dir="auto">John</div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Jan 30, 2021 at 5:36 PM John Richardson <<a href="mailto:warthogale@aol.com">warthogale@aol.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(204,204,204)">
<div style="font-style:normal;font-variant-caps:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:arial;color:black">Virtual Augmented Reality Salutations,
<div style="font-family:arial"><br>
</div>

<div style="font-family:arial">I can suggest OWASP for application fuzzing. Not originally designed for 3-D applications and scenegraph websites. So your mileage may vary.</div>

<div style="font-family:arial"><br>
</div>

<div style="font-family:arial">This suggestion is from an web IA perspective so trying to figure out ways to crash scenegraphs randomly for testing [my definition of fuzzing] would equal some assembly required.</div>

<div style="font-family:arial"><br>
</div>

<div style="font-family:arial">John<br>
<br>
<br>

<div style="font-family:helvetica,arial;font-size:10pt;color:black"></div></div></div><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:arial;color:black"><div style="font-family:arial"><div style="font-family:helvetica,arial;font-size:10pt;color:black">-----Original Message-----<br>
From: John Carlson <<a href="mailto:yottzumm@gmail.com" target="_blank" style="font-family:helvetica,arial">yottzumm@gmail.com</a>><br>
To: X3D Graphics public mailing list <<a href="mailto:x3d-public@web3d.org" target="_blank" style="font-family:helvetica,arial">x3d-public@web3d.org</a>><br>
Sent: Fri, Jan 29, 2021 6:33 pm<br>
Subject: Re: [x3d-public] This is why we need a good scenegraph fuzzer (not only for fuzz testing, but for translation).<br>
<br>

</div></div></div><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:arial;color:black"><div style="font-family:arial"><div style="font-family:helvetica,arial;font-size:10pt;color:black"><div dir="ltr" style="font-family:helvetica,arial"></div></div></div></div><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:arial;color:black"><div style="font-family:arial"><div style="font-family:helvetica,arial;font-size:10pt;color:black"><div dir="ltr" style="font-family:helvetica,arial">Note that they generate from<br clear="none"><br clear="none">1. Library<br clear="none"><br clear="none">2. Instruction Set Architecture<br clear="none"><br clear="none">3. Complexity<br clear="none"><br clear="none">I will look up how to generate from complexity, if not attractors.<br clear="none"><br clear="none"><br clear="none">John<br clear="none">
</div></div></div></div><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:arial;color:black"><div style="font-family:arial"><div style="font-family:helvetica,arial;font-size:10pt;color:black"><div dir="ltr" style="font-family:helvetica,arial"><div id="m_30662960135603269yqtfd78537" style="font-family:helvetica,arial"></div></div></div></div></div><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:arial;color:black"><div style="font-family:arial"><div style="font-family:helvetica,arial;font-size:10pt;color:black"><div dir="ltr" style="font-family:helvetica,arial"><div id="m_30662960135603269yqtfd78537" style="font-family:helvetica,arial"><br clear="none">On 1/29/21 8:06 PM, John Carlson wrote:<br clear="none">> This is why we need a good scenegraph fuzzer for fuzz testing, for <br clear="none">> improving our validators and translations.<br clear="none">><br clear="none">><br clear="none">> I suggest an approach similar to "No Man's Sky" for fuzzing, as <br clear="none">> documented in conference videos on YouTube.  But it may be worth <br clear="none">> approaching FaceBook for their fuzzer, since it's more language based <br clear="none">> (unless you consider the universe written in a language).<br clear="none">><br clear="none">><br clear="none">> <a shape="rect" href="https://www.marktechpost.com/2021/01/28/facebook-ai-introduces-n-bref-a-neural-based-decompiler-framework/" target="_blank" style="font-family:helvetica,arial">https://www.marktechpost.com/2021/01/28/facebook-ai-introduces-n-bref-a-neural-based-decompiler-framework/ </a><br clear="none">><br clear="none">><br clear="none"><br clear="none"></div></div></div></div></div><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:arial;color:black"><div style="font-family:arial"><div style="font-family:helvetica,arial;font-size:10pt;color:black"><div dir="ltr" style="font-family:helvetica,arial"><div id="m_30662960135603269yqtfd78537" style="font-family:helvetica,arial">_______________________________________________<br clear="none">x3d-public mailing list<br clear="none"><a shape="rect" href="mailto:x3d-public@web3d.org" target="_blank" style="font-family:helvetica,arial">x3d-public@web3d.org</a><br clear="none"><a shape="rect" href="http://web3d.org/mailman/listinfo/x3d-public_web3d.org" target="_blank" style="font-family:helvetica,arial">http://web3d.org/mailman/listinfo/x3d-public_web3d.org</a><br clear="none"></div>
</div>
</div>
</div>
</div>
</blockquote></div></div>