Submissions from trailofbits.com

		[dupe] LLVM Adds Constant-Time Support for Protecting Cryptographic Code (trailofbits.com)
		27 points by birdculture 21 hours ago \| past \| 4 comments
		Constant-time support coming to LLVM: Protecting cryptographic code (trailofbits.com)
		5 points by matt_d 23 hours ago \| past \| discuss
		Constant-time support coming to LLVM: Protecting cryptographic code (trailofbits.com)
		103 points by ahlCVA 1 day ago \| past \| 53 comments
		How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com)
		3 points by crescit_eundo 6 days ago \| past \| discuss
		Vulnerabilities in LUKS2 disk encryption for confidential VMs (trailofbits.com)
		4 points by crescit_eundo 6 days ago \| past \| discuss
		Balancer hack analysis and guidance for the DeFi ecosystem (trailofbits.com)
		2 points by crescit_eundo 6 days ago \| past \| discuss
		We found cryptography bugs in the elliptic library using Wycheproof (trailofbits.com)
		7 points by wslh 7 days ago \| past \| discuss
		How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com)
		2 points by tob_scott_a 8 days ago \| past \| discuss
		We found cryptography bugs in the elliptic library using Wycheproof (trailofbits.com)
		5 points by ingve 8 days ago \| past \| discuss
		How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com)
		2 points by ingve 11 days ago \| past \| discuss
		How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com)
		5 points by CiPHPerCoder 12 days ago \| past \| discuss
		Use mutation testing to find the bugs your tests don't catch (trailofbits.com)
		4 points by crescit_eundo 20 days ago \| past
		Supply chain attacks are exploiting our assumptions (trailofbits.com)
		81 points by crescit_eundo 20 days ago \| past \| 52 comments
		The cryptography behind electronic passports (trailofbits.com)
		200 points by tatersolid 26 days ago \| past \| 122 comments
		Prompt injection to RCE in AI agents (trailofbits.com)
		2 points by vinhnx 33 days ago \| past \| 1 comment
		Prompt injection to RCE in AI agents (trailofbits.com)
		3 points by ingve 35 days ago \| past
		OpenVPN2 Security: Taming 2,500 compiler warnings with CodeQL (trailofbits.com)
		2 points by summarity 61 days ago \| past
		Understanding AddressSanitizer: Better memory safety for your code (2024) (trailofbits.com)
		2 points by ashvardanian 63 days ago \| past
		Supply chain attacks are exploiting our assumptions (trailofbits.com)
		9 points by woodruffw 63 days ago \| past
		Subverting code integrity checks to locally backdoor Signal, 1Password and more (trailofbits.com)
		2 points by elashri 82 days ago \| past
		Subverting code integrity checks to locally backdoor Signal, 1Password, Slack (trailofbits.com)
		9 points by tatersolid 83 days ago \| past
		Weaponizing image scaling against production AI systems (trailofbits.com)
		494 points by tatersolid 3 months ago \| past \| 131 comments
		Marshal madness: A brief history of Ruby deserialization exploits (trailofbits.com)
		25 points by pentestercrab 3 months ago \| past \| 4 comments
		Hijacking multi-agent systems in your PajaMAS (trailofbits.com)
		7 points by Qwuke 3 months ago \| past \| 1 comment
		MCP servers can attack you before you ever use them (trailofbits.com)
		2 points by gtirloni 3 months ago \| past
		Trail of Bits' Buttercup wins 2nd place in AIxCC Challenge (trailofbits.com)
		2 points by wslh 3 months ago \| past
		Buttercup is now open-source (trailofbits.com)
		14 points by wslh 3 months ago \| past
		Buttercup is now open-source (trailofbits.com)
		1 point by wrayjustin 3 months ago \| past
		Prompt injection engineering for attackers: Exploiting GitHub Copilot (trailofbits.com)
		11 points by agentictime 3 months ago \| past \| 1 comment
		Buttercup is now open-source (trailofbits.com)
		15 points by wglb 3 months ago \| past
		More