My first big DARPA grant was about testing for buffer overflows automatically. It led to static analysis tools that everyone uses today. That was 1995.
How many decades can you hold your breath? #swsec #appsec
https://www.theregister.com/2025/02/13/fbi_cisa_unforgivable_buffer_overflow/?td=rt-3a