Hacker Newsnew | past | comments | ask | show | jobs | submit | from login

Constant-time support for LLVM to protect cryptographic code (trailofbits.com) 5 points by ingve 2 days ago | past | discuss [dupe] LLVM Adds Constant-Time Support for Protecting Cryptographic Code (trailofbits.com) 27 points by birdculture 9 days ago | past | 4 comments Constant-time support coming to LLVM: Protecting cryptographic code (trailofbits.com) 5 points by matt_d 9 days ago | past | discuss Constant-time support coming to LLVM: Protecting cryptographic code (trailofbits.com) 112 points by ahlCVA 9 days ago | past | 60 comments How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com) 3 points by crescit_eundo 14 days ago | past Vulnerabilities in LUKS2 disk encryption for confidential VMs (trailofbits.com) 4 points by crescit_eundo 14 days ago | past Balancer hack analysis and guidance for the DeFi ecosystem (trailofbits.com) 2 points by crescit_eundo 14 days ago | past We found cryptography bugs in the elliptic library using Wycheproof (trailofbits.com) 7 points by wslh 15 days ago | past How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com) 2 points by tob_scott_a 16 days ago | past We found cryptography bugs in the elliptic library using Wycheproof (trailofbits.com) 5 points by ingve 16 days ago | past How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com) 2 points by ingve 19 days ago | past How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com) 5 points by CiPHPerCoder 20 days ago | past Use mutation testing to find the bugs your tests don't catch (trailofbits.com) 4 points by crescit_eundo 28 days ago | past Supply chain attacks are exploiting our assumptions (trailofbits.com) 81 points by crescit_eundo 28 days ago | past | 52 comments The cryptography behind electronic passports (trailofbits.com) 200 points by tatersolid 34 days ago | past | 122 comments Prompt injection to RCE in AI agents (trailofbits.com) 2 points by vinhnx 41 days ago | past | 1 comment Prompt injection to RCE in AI agents (trailofbits.com) 3 points by ingve 43 days ago | past OpenVPN2 Security: Taming 2,500 compiler warnings with CodeQL (trailofbits.com) 2 points by summarity 69 days ago | past Understanding AddressSanitizer: Better memory safety for your code (2024) (trailofbits.com) 2 points by ashvardanian 71 days ago | past Supply chain attacks are exploiting our assumptions (trailofbits.com) 9 points by woodruffw 71 days ago | past Subverting code integrity checks to locally backdoor Signal, 1Password and more (trailofbits.com) 2 points by elashri 3 months ago | past Subverting code integrity checks to locally backdoor Signal, 1Password, Slack (trailofbits.com) 9 points by tatersolid 3 months ago | past Weaponizing image scaling against production AI systems (trailofbits.com) 494 points by tatersolid 3 months ago | past | 131 comments Marshal madness: A brief history of Ruby deserialization exploits (trailofbits.com) 25 points by pentestercrab 3 months ago | past | 4 comments Hijacking multi-agent systems in your PajaMAS (trailofbits.com) 7 points by Qwuke 3 months ago | past | 1 comment MCP servers can attack you before you ever use them (trailofbits.com) 2 points by gtirloni 3 months ago | past Trail of Bits' Buttercup wins 2nd place in AIxCC Challenge (trailofbits.com) 2 points by wslh 3 months ago | past Buttercup is now open-source (trailofbits.com) 14 points by wslh 3 months ago | past Buttercup is now open-source (trailofbits.com) 1 point by wrayjustin 3 months ago | past Prompt injection engineering for attackers: Exploiting GitHub Copilot (trailofbits.com) 11 points by agentictime 3 months ago | past | 1 comment More

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact Search: