This blog post discusses the challenges of determining what to fuzz in complex software targets, using threat modeling and data flow analysis to prioritize areas for fuzzing. It focuses on practical strategies employed in Mbed TLS, highlighting the importance of a methodical approach to harness creation.