The cryptography behind electronic voting (and why paper ballots are still essential) As millions of Americans vote in today’s U.S. midterms, most will use paper ballots, which are prote... 2026-11-3 12:0:0 | 阅读: 7 | 收藏 | Trail of Bits Blog - blog.trailofbits.com ballot election voting voter voters

Backporting security fixes at scale with Codex Stable Linux releases lack existing security fixes because backporting them is time-consuming and of... 2026-11-2 12:0:0 | 阅读: 16 | 收藏 | Trail of Bits Blog - blog.trailofbits.com software cves backporting codex security

Your AI agent fixed the bug, but what else did it change? Today we’re publishing patching-bugs and regression-hunt, two plugins that let engineers delegate pa... 2026-10-21 15:0:0 | 阅读: 22 | 收藏 | Trail of Bits Blog - blog.trailofbits.com hunt regressions maintainers codex agents

Package managers have an integrity problem I tested 25 of the most popular package managers to check whether they detect a compromised package... 2026-10-14 11:0:0 | 阅读: 13 | 收藏 | Trail of Bits Blog - blog.trailofbits.com repository lockfile developer malicious lockfiles

SequenceHash: multihashing for the rest of us Multihashing is one of those cryptographic tasks that’s easy not to think about too much. This is un... 2026-10-2 11:0:0 | 阅读: 58 | 收藏 | Trail of Bits Blog - blog.trailofbits.com hasher sequencemac

Don't let TEEs break your MPC Threshold signature schemes, a form of multi-party computation (MPC) that lets a set of parties sign... 2026-9-25 11:0:0 | 阅读: 32 | 收藏 | Trail of Bits Blog - blog.trailofbits.com security attestation mpc tees

SAML: A fractal of bad design Born out of academia and raised in corporate IT departments, the Security Assertion Markup Language... 2026-9-21 11:0:0 | 阅读: 52 | 收藏 | Trail of Bits Blog - blog.trailofbits.com oidc security sso

Auditing in the age of (good enough) AI Security firms have published numerous blog posts describing how they pointed their agent harness at... 2026-9-18 11:0:0 | 阅读: 36 | 收藏 | Trail of Bits Blog - blog.trailofbits.com masm miden analysis library lean

1Password's AI patching benchmark is misleading 1Password’s FLAWED report, published on August 6, 2026, gives defenders a misleading picture of AI p... 2026-9-15 11:0:0 | 阅读: 33 | 收藏 | Trail of Bits Blog - blog.trailofbits.com agents security planet maintainers

A “proof” of Fermat’s Last Theorem that fits the margin Fermat famously claimed to have a “truly marvelous proof” of his Last Theorem, but he never wrote it... 2026-9-9 11:0:0 | 阅读: 52 | 收藏 | Trail of Bits Blog - blog.trailofbits.com lean fermat theorem proofs flt

VMs won't contain cyber-capable agents As part of Patch the Planet, we received preview access to GPT 5.6-Cyber with a simple task: evaluat... 2026-8-26 11:0:0 | 阅读: 51 | 收藏 | Trail of Bits Blog - blog.trailofbits.com machine security upstream software gpt

State divergence enables unauthorized access We found and reported a bug in Provenance Blockchain, a public proof-of-stake chain built on Cosmos... 2026-8-25 11:0:0 | 阅读: 42 | 收藏 | Trail of Bits Blog - blog.trailofbits.com marker markers attacker provenance

How Trail of Bits helps verify the integrity of your Signal chats Every Signal chat starts the same way: the client asks the Signal server for the public key associat... 2026-8-11 17:30:0 | 阅读: 41 | 收藏 | Trail of Bits Blog - blog.trailofbits.com client auditor auditors trail

A few notes on AWS Nitro Enclaves: KMS integration Nitro Enclaves and Key ManagementService (KMS) feel like anatural fit: since the KMS can verify at... 2026-8-5 11:0:0 | 阅读: 55 | 收藏 | Trail of Bits Blog - blog.trailofbits.com kms enclave cmk enclaves attestation

Building secure Uniswap v4 hooks Uniswap v4 hooks let developers add custom behavior to pools, including dynamic fees, custom account... 2026-7-30 11:0:0 | 阅读: 67 | 收藏 | Trail of Bits Blog - blog.trailofbits.com poolmanager accounting fee pools attacker

How we use /goal to find bugs in Patch the Planet Codex’s /goal feature amplifies bug hunting, but getting good results requires the right prompt, the... 2026-7-28 11:0:0 | 阅读: 66 | 收藏 | Trail of Bits Blog - blog.trailofbits.com codex outcome client security remote

Rust-proof your code with our new Testing Handbook chapter We’ve added a new chapter to our Testing Handbook: a comprehensive guide to security testing Rust pr... 2026-7-13 11:0:0 | 阅读: 47 | 收藏 | Trail of Bits Blog - blog.trailofbits.com security chapter memory analysis reviews

Mutation testing comes to DAML In April we released Mewt, our open-source mutation-testing engine that finds the gaps in your test... 2026-7-8 11:0:0 | 阅读: 46 | 收藏 | Trail of Bits Blog - blog.trailofbits.com daml mewt buyer seller mutants

Field reports from Patch the Planet We’re running Patch the Planet, an ongoing collaboration with OpenAI that pairs Trail of Bits engine... 2026-7-2 11:0:0 | 阅读: 61 | 收藏 | Trail of Bits Blog - blog.trailofbits.com gpt harness zlib maintainers bespoke

Shipping post-quantum cryptography to Python Post-quantum cryptography is now one pip-install away for the entire Python ecosystem. With funding... 2026-6-30 11:0:0 | 阅读: 69 | 收藏 | Trail of Bits Blog - blog.trailofbits.com dsa kem primitives pyca python