hey Jakob, thank you so much for your response! I think it makes a lot of sense; I know we’re all limited on time. I myself have a full-time job and a family. I spent a few hours yesterday looking through how timedate gets formatted with respect to one of the internationalization issues. if anything else, it was a good way to get the v8 build set up and start peeking through the code flow. one of the challenges is that I don’t really know how to submit a CL. obviously I’m not a owner so I can’t take ownership of an issue but I *would* like to contribute. I just don’t know how to get the component owner to assign the ticket to themselves and then allow me to work on the ticket , is there a defined way to do that? I’ve tried to reach out to the component owners and I am still awaiting a response.
it’s interesting you bring up vulnerabilities. I have a security engineering background and work on seceng full-time at my day job, so I’m always interested in fuzzing and finding security vulns. web assembly has always interested me so maybe I can take some time fuzzing through that. however, I imagine that internally you have lots of coverage using your fuzzing (afl) tools? in order to demonstrate commitment, would it be worth creating a PR and emailing the patch to the component owners directly? — Jovon On Mon, Feb 5, 2024 at 3:29 AM Jakob Kummerow <jkumme...@chromium.org> wrote: > Hi, both of you, and welcome to V8! If you can help, that is certainly > appreciated. > > That said, V8 has a notoriously steep learning curve, even for those who > work on it full-time, and even more so for anyone who wants to contribute > part-time or as a hobby. Probably related to that, the vast majority of > folks who send "hi, I'm new here, can anyone tell me where to start?" mails > to this list are never heard from again; which in turn disincentivizes > those with more experience from spending their precious time on trying to > help newcomers -- especially considering that work time is an extremely > limited resource. You'll probably have to prove your commitment before you > can expect anyone to spend hours mentoring you. In the meantime, maybe you > can support each other on your ramp-up journey? > > Regarding https://github.com/v8/v8.dev/issues: that's the mostly-unused > tracker for issues with the v8.dev site. The actual V8 issue tracker is, > for now, at https://bugs.chromium.org/p/v8/issues/list (but I think it'll > migrate to issues.chromium.org soon). So if you're looking for bugs to > work on, look there. > > One direction you can explore that may be more rewarding is projects that > treat V8 as opaque (i.e. don't require much knowledge about its internals > at first), such as fuzzing it (either JS or Wasm). You might even win bug > bounties for successful finds. If you have other ideas on how to improve > test coverage (e.g. by adding more tests for code paths that aren't covered > well, or cleaning up useless tests, or speeding up existing tests without > reducing their usefulness so that the saved time can be spent on additional > tests, etc), and time to work on them, that would also be useful. > > Good luck, and have fun! > > > On Sat, Feb 3, 2024 at 10:11 PM Ali Raein <alirae...@gmail.com> wrote: > >> Hi Jovon. Hope all is well. I was about to write the same email as yours. >> Thought I check the responses here first. Has anyone reached out to you? >> I'm new here. Any help would be much appreciated. Thanks, >> - Ali Raein >> >> On Friday, January 19, 2024 at 2:56:58 PM UTC-5 jovon....@gmail.com >> wrote: >> >>> 👋🏾 there! i'm a security engineer and i'd like to learn more about v8 >>> and start contributing to the project. what do you need help with? i have >>> the following (1) time to learn + contribute to code/docs/reviews and (2) >>> several years of security engineering experience. >>> >>> i'd love to help out and i looked at a few issues at >>> https://github.com/v8/v8.dev/issues. does anything jump out to you that >>> needs help? >>> >>> -- >>> Jovon Itwaru >>> >> -- >> > -- > -- > v8-dev mailing list > v8-dev@googlegroups.com > http://groups.google.com/group/v8-dev > --- > You received this message because you are subscribed to the Google Groups > "v8-dev" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to v8-dev+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/v8-dev/CAKSzg3Sd7dpQFBjoJ0o8eVMP_U08roHDuNNJKXRfbs1owdgz0w%40mail.gmail.com > <https://groups.google.com/d/msgid/v8-dev/CAKSzg3Sd7dpQFBjoJ0o8eVMP_U08roHDuNNJKXRfbs1owdgz0w%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- -- v8-dev mailing list v8-dev@googlegroups.com http://groups.google.com/group/v8-dev --- You received this message because you are subscribed to the Google Groups "v8-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to v8-dev+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/v8-dev/CAB%2BP0AD2gqs28ZX8G8A6rQ7K1rGAvWD%2BXN4mFNSxzHJywL7aNA%40mail.gmail.com.
