Submissions from trailofbits.com

		The Custodial Stablecoin Rekt Test (trailofbits.com)
		2 points by wslh 8 days ago \| past \| discuss
		The cryptography behind passkeys (trailofbits.com)
		276 points by tatersolid 27 days ago \| past \| 263 comments
		Making PyPI's test suite faster (trailofbits.com)
		125 points by rbanffy 32 days ago \| past \| 39 comments
		Making PyPI's test suite 81% faster (trailofbits.com)
		8 points by zdw 39 days ago \| past
		Insecure credential storage plagues MCP (trailofbits.com)
		2 points by wslh 39 days ago \| past
		Making PyPI's test suite 81% faster (trailofbits.com)
		11 points by woodruffw 39 days ago \| past \| 2 comments
		Deceiving users with ANSI terminal codes in MCP (trailofbits.com)
		3 points by HypnoticOcelot 41 days ago \| past \| 1 comment
		MCP servers can steal your conversation history (trailofbits.com)
		1 point by ingve 47 days ago \| past
		Jumping the line: How MCP servers can attack you before you ever use them (trailofbits.com)
		1 point by ingve 49 days ago \| past
		The future of Clang-based tooling (2023) (trailofbits.com)
		2 points by fanf2 52 days ago \| past
		A New ASN.1 API for Python (trailofbits.com)
		171 points by woodruffw 52 days ago \| past \| 124 comments
		Benchmarking OpenSearch and Elasticsearch (trailofbits.com)
		3 points by woodruffw 3 months ago \| past
		Threat modeling the TRAIL of Bits way (trailofbits.com)
		2 points by ingve 3 months ago \| past
		Don't Recurse on Untrusted Input (trailofbits.com)
		11 points by wslh 3 months ago \| past \| 5 comments
		The $1.5B Bybit Hack (trailofbits.com)
		128 points by todsacerdoti 3 months ago \| past \| 138 comments
		Don't Recurse on Untrusted Input (trailofbits.com)
		3 points by woodruffw 3 months ago \| past
		The call for invariant-driven development (trailofbits.com)
		2 points by galapago 3 months ago \| past
		Best Practices for Key Derivation (trailofbits.com)
		3 points by tatersolid 4 months ago \| past
		Auditing RubyGems (trailofbits.com)
		2 points by woodruffw 6 months ago \| past
		Evaluating Solidity support in AI coding assistants (trailofbits.com)
		1 point by tyoma 6 months ago \| past
		Attestations: A new generation of signatures on PyPI (trailofbits.com)
		18 points by pabs3 6 months ago \| past \| 1 comment
		Attestations: A new generation of signatures on PyPI (trailofbits.com)
		5 points by woodruffw 6 months ago \| past \| 1 comment
		Fuzzing between the lines in popular barcode software (trailofbits.com)
		179 points by ingve 7 months ago \| past \| 55 comments
		A deep dive into Linux's new mseal syscall (trailofbits.com)
		252 points by todsacerdoti 7 months ago \| past \| 54 comments
		Microsoft didn't sandbox Windows Defender, so I did (2017) (trailofbits.com)
		63 points by LorenDB 8 months ago \| past \| 51 comments
		AWS Nitro Enclaves: Attack Surface (trailofbits.com)
		144 points by ingve 8 months ago \| past \| 15 comments
		Notes on AWS Nitro Enclaves: Attack Surface (trailofbits.com)
		20 points by tatersolid 8 months ago \| past \| 1 comment
		Seriously, stop using RSA (2019) (trailofbits.com)
		3 points by thunderbong 8 months ago \| past \| 1 comment
		Friends don't let friends reuse nonces (trailofbits.com)
		3 points by bubblehack3r 8 months ago \| past \| 1 comment
		Friends don't let friends reuse nonces (trailofbits.com)
		1 point by thunderbong 8 months ago \| past
		More