Marshal madness: A brief history of Ruby deserialization exploits(blog.trailofbits.com)22 points by pentestercrab 1 year ago | 4 comments
The cryptography behind passkeys(blog.trailofbits.com)250 points by tatersolid 1 year ago | 227 comments
Unexpected security footguns in Go's parsers(blog.trailofbits.com)213 points by ingve 1 year ago | 120 comments
We found cryptography bugs in the elliptic library using Wycheproof(blog.trailofbits.com)82 points by crescit_eundo 9 months ago | 8 comments