Submissions from trailofbits.com

		Benchmarking OpenSearch and Elasticsearch (trailofbits.com)
		3 points by woodruffw 32 days ago \| past
		Threat modeling the TRAIL of Bits way (trailofbits.com)
		2 points by ingve 39 days ago \| past
		Don't Recurse on Untrusted Input (trailofbits.com)
		11 points by wslh 43 days ago \| past \| 5 comments
		The $1.5B Bybit Hack (trailofbits.com)
		128 points by todsacerdoti 44 days ago \| past \| 138 comments
		Don't Recurse on Untrusted Input (trailofbits.com)
		3 points by woodruffw 45 days ago \| past
		The call for invariant-driven development (trailofbits.com)
		2 points by galapago 54 days ago \| past
		Best Practices for Key Derivation (trailofbits.com)
		3 points by tatersolid 69 days ago \| past
		Auditing RubyGems (trailofbits.com)
		2 points by woodruffw 3 months ago \| past
		Evaluating Solidity support in AI coding assistants (trailofbits.com)
		1 point by tyoma 4 months ago \| past
		Attestations: A new generation of signatures on PyPI (trailofbits.com)
		18 points by pabs3 4 months ago \| past \| 1 comment
		Attestations: A new generation of signatures on PyPI (trailofbits.com)
		5 points by woodruffw 4 months ago \| past \| 1 comment
		Fuzzing between the lines in popular barcode software (trailofbits.com)
		179 points by ingve 5 months ago \| past \| 55 comments
		A deep dive into Linux's new mseal syscall (trailofbits.com)
		252 points by todsacerdoti 5 months ago \| past \| 54 comments
		Microsoft didn't sandbox Windows Defender, so I did (2017) (trailofbits.com)
		63 points by LorenDB 6 months ago \| past \| 51 comments
		AWS Nitro Enclaves: Attack Surface (trailofbits.com)
		144 points by ingve 6 months ago \| past \| 15 comments
		Notes on AWS Nitro Enclaves: Attack Surface (trailofbits.com)
		20 points by tatersolid 6 months ago \| past \| 1 comment
		Seriously, stop using RSA (2019) (trailofbits.com)
		3 points by thunderbong 6 months ago \| past \| 1 comment
		Friends don't let friends reuse nonces (trailofbits.com)
		3 points by bubblehack3r 6 months ago \| past \| 1 comment
		Friends don't let friends reuse nonces (trailofbits.com)
		1 point by thunderbong 6 months ago \| past
		Friends don't let friends reuse nonces (trailofbits.com)
		3 points by todsacerdoti 6 months ago \| past
		Holy Macroni A recipe for progressive language enhancement (2023) (trailofbits.com)
		2 points by ashvardanian 6 months ago \| past
		Sanitize your C++ containers: ASan annotations step-by-step (trailofbits.com)
		3 points by matt_d 6 months ago \| past
		Sanitize your C++ containers: ASan annotations step-by-step (trailofbits.com)
		3 points by xxmarkuski 6 months ago \| past
		"Unstripping" binaries: Restoring debugging information in GDB with Pwndbg (trailofbits.com)
		165 points by aa_is_op 7 months ago \| past \| 23 comments
		"Unstripping" binaries: Restoring debugging information in GDB with Pwndbg (trailofbits.com)
		4 points by ingve 7 months ago \| past
		What would you do with that old GPU? (trailofbits.com)
		3 points by ingve 7 months ago \| past
		Provisioning cloud infrastructure the wrong way, but faster (trailofbits.com)
		2 points by todsacerdoti 7 months ago \| past
		“YOLO” is not a valid hash construction (trailofbits.com)
		140 points by ssklash 7 months ago \| past \| 73 comments
		Cloud cryptography demystified: Google Cloud Platform (trailofbits.com)
		4 points by tob_scott_a 8 months ago \| past
		Our audit of Homebrew (trailofbits.com)
		845 points by zdw 8 months ago \| past \| 184 comments
		More