Loading...

Tag trends are in beta. Feedback? Thoughts? Email me at [email protected]

Friends don’t let friends reuse nonces

"Unstripping" binaries: Restoring debugging information in GDB with Pwndbg

Provisioning cloud infrastructure the wrong way, but faster

“YOLO” is not a valid hash construction

Our audit of Homebrew

Quantum is unimportant to post-quantum

AES-Gem (AES with Galois Extended Mode)

EuroLLVM 2024 trip report

The good, the bad, and the weird (2018)

Themes from Real World Crypto 2024

The life and times of an Abstract Syntax Tree

The life of an optimization barrier

A peek into build provenance for Homebrew

Introducing Ruzzy, a coverage-guided Ruby fuzzer

Read code like a pro with our weAudit VSCode extension

Why fuzzing over formal verification?

How we applied fuzzing techniques to cURL

Cloud cryptography demystified: Amazon Web Services

Security flaws in an SSO plugin for Caddy (2023)

appsec.guide just got a new chapter on fuzzing

We build X.509 chains so you don't have to

LeftoverLocals: Listening to LLM responses through leaked GPU local memory

Enhancing trust for SGX enclaves

Differ: Tool for testing and validating transformed programs

Adding Build Provenance to Homebrew

Security flaws in an SSO plugin for Caddy

Holy Macroni! A recipe for progressive language enhancement

Pitfalls of relying on eBPF for security monitoring (and some solutions)

Announcing the Trail of Bits Testing Handbook

The future of Clang-based tooling

More →