{
  "@context":[
    "https://www.w3.org/ns/activitystreams",
    {"Hashtag":"as:Hashtag"}
  ],
  "published":"2023-08-12T20:03:36.082Z",
  "attributedTo":"https://gopinath.org/actors/rahul",
  "to":["https://www.w3.org/ns/activitystreams#Public"],
  "cc":["https://gopinath.org/actors/rahul/followers"],
  "content":"<p>A surprising (for me) opinion I heard at <a href=\"https://gopinath.org/tags/usesec23\" class=\"hashtag\" rel=\"tag\">#usesec23</a> Usenix Security 2023; You can claim CVEs in your fuzzer paper so long as you found them during your research in developing the concerned fuzzer. In particular, there is no expectation of reproducibility of such CVEs specifically using the fuzzer in the paper. I note that CVEs are still considered a sort of real world touchstone for fuzzers by many reviewers. I wonder what the consensus of the community is about this.</p>",
  "mediaType":"text/html",
  "attachment":[],
  "tag":[
      {"type":"Hashtag","name":"#usesec23","href":"https://gopinath.org/tags/usesec23"}
  ],
  "type":"Note",
  "id":"https://gopinath.org/objects/HliF7pFtRVw"
}