Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Fred Toussi — Wed, 18 Feb 2026 08:05:04 -0000

Thanks, email checked and replied to.

Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Cen Zhang — Tue, 17 Feb 2026 00:40:09 -0000

Hi Fred, would u mind to check the email from "slee3846@gatech.edu"? I'm also in the CC list (czhang887@gatech.edu). We compiled our recent security findings there. Thanks!

Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Cen Zhang — Tue, 17 Feb 2026 00:40:06 -0000

Hi Fred, would u mind to check the email from "slee3846@gatech.edu"? I'm also in the CC list (czhang887@gatech.edu). We compiled our recent security findings there. Thanks!

Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Cen Zhang — Tue, 02 Dec 2025 22:45:28 -0000

Thanks!

Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Fred Toussi — Tue, 02 Dec 2025 22:43:41 -0000

Thanks for your interest. HSQLDB is supported by OSS-Fuzz. You are welcome to run assessments and report via OSS-Fuzz bug report system and coordinate disclosure with us via email.

Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Cen Zhang — Tue, 25 Nov 2025 04:27:36 -0000

Hi HyperSQL developers,

We (LeeSinLiang, and Cen Zhang, and a lot of our team members) are Team Atlanta from Georgia Institute of Technology, winners of DARPA's AI Cyber Challenge (AIxCC). We're reaching out to propose a security assessment collaboration with your project. This effort is recommended by DARPA's initiative to apply competition technologies to real-world open source projects.

Background

We have built an AI-enhanced CRS (Cyber Reasoning System) for automatic vulnerability detection and repair.

AIxCC Competition: https://aicyberchallenge.com/
Our Team: https://team-atlanta.github.io/

What we plan to provide

OSS-Fuzz Integration:
- If your project isn't yet supported by OSS-Fuzz, we'll develop compatible fuzzing harnesses to enable its integration. This can make our system applicable to your project.
Security Assessment:
- We'll run assessments locally on our infrastructure (no changes/efforts from your side) to identify potential vulnerabilities and synthesize corresponding patches.
Detailed Reports:
- For any findings, we'll provide reports including: 1) identified vulnerabilities and explanations, 2) the proof-of-concept (PoC) to trigger those vulnerabilities, and 3) corresponding patches.
Responsible Disclosure:
- We'll follow your preferred reporting channels (private email, OSS-Fuzz bug report system, or whatever channel you prefer) and coordinate disclosure timelines with your team. Note that all findings will be further manually validated by our researchers before reporting to ensure quality and accuracy.

What we need

A brief acknowledgment confirming your willingness to collaborate. This will serve as approval for our assessment plans.

Looking forward to your response and please let me know for any further issues/concerns!

DatabaseManagerSwing With JAVA 25

Fred Toussi — Fri, 26 Sep 2025 11:47:11 -0000

Thanks for reporting. Will check it later.

DatabaseManagerSwing With JAVA 25

Sliderule Smith — Wed, 24 Sep 2025 17:13:22 -0000

Fred:
I recently upgraded my JAVA to 64-Bit Server VM (build 25+37-LTS-3491, mixed mode, sharing) and a date of 2025-09-16 LTS from Oracle build 25+37-LTS-3491, mixed mode, sharing in preparation to test/use HSQL 2.7.5 when available.

I noticed, when using DatabaseManagerSwing ( which I often use, thanks ) . . . a difference with HSQL 2.7.4 ( at least with Windows 11 ) when choosing to display a Select statement output, between JAVA 17 vs JAVA 25, when I elect to View -> Show results in Grid.

With JAVA 17, the display shows row heading and underlining correctly, however, JAVA 25, the display is not aligned in columns.

Using the SQL command below, as an example:

Select * From INFORMATION_SCHEMA.SYSTEM_TABLESTATS

I mention this, for testing DatabaseManagerSwing with HSQL 2.7.5 when available. Just thought you might want to know.

Sliderule

HsqlDB and java.lang.System.Logger

prrvchr — Sun, 24 Aug 2025 21:22:19 -0000

Hi Fred,

System Logger makes it very easy to retrieve logs without having to resort to third-party libraries.

It's true that this is after Java 8, but I see that a Java 11 version is available in the hsqldb driver pack. Using one interface and two different implementations makes it very easy to support logging before and after Java 9.

HsqlDB and java.lang.System.Logger

Fred Toussi — Fri, 01 Aug 2025 14:45:56 -0000

We don't use this as our base compatibility is Java 1.8. HSQLDB supports logging. What do you want to use this interface for?

Recent posts to Open Discussion

Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Proposal: Security Assessment from Team Atlanta (DARPA AIxCC)

Background

What we plan to provide

What we need

DatabaseManagerSwing With JAVA 25

DatabaseManagerSwing With JAVA 25

HsqlDB and java.lang.System.Logger

HsqlDB and java.lang.System.Logger