7 stories tagged trail-of-bits, newest first.
20 points by tob_scott_a | 2 comments
A Trail of Bits blog post on reviewing changes made by AI coding agents, focusing on unintended modifications beyond the requested bug fix.
9 points by tob_scott_a | 0 comments
Trail of Bits blog post introducing SequenceHash and SequenceMAC, open-source hash constructions for secure multihashing with unambiguous input encoding, part of C2SP.
19 points by tob_scott_a | 4 comments
Blog post by Suha Sabi Hussain critiquing 1Password Off-by-1 Labs' FLAWED report on frontier model vulnerability patches and its implications for industry research.
328 points by aray07 | 175 comments
Trail of Bits blog post arguing SAML's design-by-committee complexity makes it insecure and that it should be deprecated in favor of OpenID Connect.
88 points by aray07 | 13 comments
Trail of Bits blog post on using AI agents to build custom tooling (LSP server, decompiler, static analyzer) and formal models for auditing the Miden zero-knowledge VM.
469 points by tatersolid | 131 comments
Trail of Bits blog post showing how downscaled images can hide multimodal prompt injections to exfiltrate data from production AI systems like Gemini CLI.
778 points by zdw | 160 comments
Trail of Bits blog post describing its security audit of Homebrew's brew CLI and related repositories, written jointly with the Homebrew maintainers.