Hacker Newsnew | past | comments | ask | show | jobs | submit | from login

Using threat modeling and prompt injection to audit Comet (trailofbits.com) 1 point by ingve 1 day ago | past | discuss Escaping Misconfigured VSCode Extensions (2023) (trailofbits.com) 13 points by abelanger 2 days ago | past | discuss Carelessness versus Craftsmanship in Cryptography (trailofbits.com) 2 points by tux3 4 days ago | past | discuss Carelessness versus craftsmanship in cryptography (trailofbits.com) 96 points by ingve 5 days ago | past | 16 comments Building Cryptographic Agility into Sigstore (trailofbits.com) 2 points by tatersolid 24 days ago | past Building Cryptographic Agility into Sigstore (trailofbits.com) 3 points by CiPHPerCoder 24 days ago | past | 1 comment Lack of isolation in agentic browsers resurfaces old vulnerabilities (trailofbits.com) 3 points by ingve 41 days ago | past We found cryptography bugs in the elliptic library using Wycheproof (trailofbits.com) 113 points by crescit_eundo 53 days ago | past | 13 comments Can chatbots craft correct code? (trailofbits.com) 5 points by crescit_eundo 53 days ago | past Destroying x86_64 instruction decoders with differential fuzzing (trailofbits.com) 5 points by fanf2 53 days ago | past | 1 comment Detect Go's silent arithmetic bugs with go-panikint (trailofbits.com) 4 points by conslit 54 days ago | past | 1 comment Catching malicious package releases using a transparency log (trailofbits.com) 3 points by abhisek 69 days ago | past Catching malicious package releases using a transparency log (trailofbits.com) 6 points by tatersolid 73 days ago | past Mrva: Terminal-first approach to CodeQL multi-repo variant analysis (trailofbits.com) 3 points by ingve 74 days ago | past | 1 comment Constant-time support for LLVM to protect cryptographic code (trailofbits.com) 5 points by ingve 83 days ago | past [dupe] LLVM Adds Constant-Time Support for Protecting Cryptographic Code (trailofbits.com) 27 points by birdculture 89 days ago | past | 4 comments Constant-time support coming to LLVM: Protecting cryptographic code (trailofbits.com) 5 points by matt_d 89 days ago | past Constant-time support coming to LLVM: Protecting cryptographic code (trailofbits.com) 112 points by ahlCVA 3 months ago | past | 61 comments How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com) 3 points by crescit_eundo 3 months ago | past Vulnerabilities in LUKS2 disk encryption for confidential VMs (trailofbits.com) 4 points by crescit_eundo 3 months ago | past Balancer hack analysis and guidance for the DeFi ecosystem (trailofbits.com) 2 points by crescit_eundo 3 months ago | past We found cryptography bugs in the elliptic library using Wycheproof (trailofbits.com) 7 points by wslh 3 months ago | past How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com) 2 points by tob_scott_a 3 months ago | past We found cryptography bugs in the elliptic library using Wycheproof (trailofbits.com) 5 points by ingve 3 months ago | past How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com) 2 points by ingve 3 months ago | past How we avoided side-channels in our new post-quantum Go cryptography libraries (trailofbits.com) 5 points by CiPHPerCoder 3 months ago | past Use mutation testing to find the bugs your tests don't catch (trailofbits.com) 4 points by crescit_eundo 3 months ago | past Supply chain attacks are exploiting our assumptions (trailofbits.com) 81 points by crescit_eundo 3 months ago | past | 52 comments The cryptography behind electronic passports (trailofbits.com) 200 points by tatersolid 3 months ago | past | 122 comments Prompt injection to RCE in AI agents (trailofbits.com) 2 points by vinhnx 4 months ago | past | 1 comment More

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact Search: