Fosstodon

0 posts0 participants0 posts today

stfhuh <a href="https://chaos.social/tags/trailofbits" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#trailofbits</a> did an audit of <a href="https://chaos.social/tags/simplex" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#simplex</a> - only the "protocol spec" <a href="https://github.com/simplex-chat/simplex-chat/blob/stable/docs/SimpleX_Design_Review_2024_Summary_Report_12_08_2024.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/simplex-chat/simplex-chat/blob/stable/docs/SimpleX_Design_Review_2024_Summary_Report_12_08_2024.pdf</a>quite limited scope. and last time i looked at the spec i lost my appetite, but apparently there have been updates, like addition of sntrup pq kem. so maybe this has improved? still wouldn't use it the supply chain attack surface is begging for a "soon" not an "if". and the global transcript of group chats was out of scope in this audit. so, meh?

Pyrzout :vm:White House: Use memory-safe programming languages to protect the nation <a href="https://www.helpnetsecurity.com/2024/02/27/memory-safe-programming-languages/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.helpnetsecurity.com/2024/02/27/memory-safe-programming-languages/</a> <a href="https://social.skynetcloud.site/tags/criticalinfrastructure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#criticalinfrastructure</a> <a href="https://social.skynetcloud.site/tags/softwaredevelopment" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#softwaredevelopment</a> <a href="https://social.skynetcloud.site/tags/Horizon3" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Horizon3</a>.ai <a href="https://social.skynetcloud.site/tags/programming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#programming</a> <a href="https://social.skynetcloud.site/tags/TrailofBits" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TrailofBits</a> <a href="https://social.skynetcloud.site/tags/government" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#government</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/Honeywell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Honeywell</a> <a href="https://social.skynetcloud.site/tags/Hotstuff" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hotstuff</a> <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#News</a> <a href="https://social.skynetcloud.site/tags/USA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USA</a>

Tarnkappe.info📬 LeftoverLocals: Apple, AMD und Qualcomm GPUs von Sicherheitslücke betroffen <a href="https://social.tchncs.de/tags/ITSicherheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITSicherheit</a> <a href="https://social.tchncs.de/tags/AMD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AMD</a> <a href="https://social.tchncs.de/tags/Apple" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Apple</a> <a href="https://social.tchncs.de/tags/CPUs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPUs</a> <a href="https://social.tchncs.de/tags/HeidyKhlaaf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HeidyKhlaaf</a> <a href="https://social.tchncs.de/tags/LeftoverLocals" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LeftoverLocals</a> <a href="https://social.tchncs.de/tags/ProofofConcept" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ProofofConcept</a> <a href="https://social.tchncs.de/tags/Qualcomm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Qualcomm</a> <a href="https://social.tchncs.de/tags/Sicherheitsl%C3%BCcke" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sicherheitslücke</a> <a href="https://social.tchncs.de/tags/TrailofBits" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TrailofBits</a> <a href="https://sc.tarnkappe.info/af0398" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://sc.tarnkappe.info/af0398</a>

Seldon<a href="https://fosstodon.org/tags/simplexchat" class="mention hashtag" rel="tag">#simplexchat</a> seems like an intriguing <a href="https://fosstodon.org/tags/privacy" class="mention hashtag" rel="tag">#privacy</a>-focused, <a href="https://fosstodon.org/tags/decentralized" class="mention hashtag" rel="tag">#decentralized</a> messenger app. <a href="https://fosstodon.org/tags/trailofbits" class="mention hashtag" rel="tag">#trailofbits</a> conducted a <a href="https://fosstodon.org/tags/security" class="mention hashtag" rel="tag">#security</a> audit late last year and the publication is available to read if anyone is curious. However, it would be beneficial if there are a few more audits performed given the boasting on their website regarding the privacy and security of the messenger. Audits can be expensive, but the assurance our <a href="https://fosstodon.org/tags/data" class="mention hashtag" rel="tag">#data</a> is safe is paramount. <a href="https://github.com/trailofbits/publications/blob/master/reviews/SimpleXChat.pdf" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://github.com/trailofbits/publications/blob/master/reviews/SimpleXChat.pdf</a>

Crypto NewsCFTC adds execs from Circle, Ava Labs and Fireblocks to tech advisory group - The technology advisory committee aims to assist the CFTC in “ide... - <a href="https://cointelegraph.com/news/cftc-adds-execs-from-circle-ava-labs-and-fireblocks-to-tech-advisory-group" rel="nofollow noopener noreferrer" target="_blank">https://cointelegraph.com/news/cftc-adds-execs-from-circle-ava-labs-and-fireblocks-to-tech-advisory-group</a> <a href="https://schleuss.online/tags/technologyadvisorycommittee" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#technologyadvisorycommittee</a> <a href="https://schleuss.online/tags/incadigital" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#incadigital</a> <a href="https://schleuss.online/tags/trailofbits" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#trailofbits</a> <a href="https://schleuss.online/tags/fireblocks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fireblocks</a> <a href="https://schleuss.online/tags/abalanche" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#abalanche</a> <a href="https://schleuss.online/tags/avalabs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#avalabs</a> <a href="https://schleuss.online/tags/trmlabs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#trmlabs</a> <a href="https://schleuss.online/tags/circle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#circle</a> <a href="https://schleuss.online/tags/cftc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cftc</a>

GuinnessI truly enjoyed reading Trail of Bits blog post on their security audit of <a href="https://free.gluten.space/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> ( <a href="https://blog.trailofbits.com/2022/12/22/curl-security-audit-threat-model/" rel="nofollow noopener noreferrer" target="_blank">https://blog.trailofbits.com/2022/12/22/curl-security-audit-threat-model/</a> ) and <a href="https://mastodon.social/@bagder" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bagder</a> answer on his blog ( <a href="https://daniel.haxx.se/blog/2022/12/21/the-2022-curl-security-audit/" rel="nofollow noopener noreferrer" target="_blank">https://daniel.haxx.se/blog/2022/12/21/the-2022-curl-security-audit/</a> ). This is the way security audits should be handled, keeping clarity, addressing critical flaws, and working together towards a common path, software security and reliability.<a href="https://free.gluten.space/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://free.gluten.space/tags/trailofbits" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#trailofbits</a>

Harry SintonenThe 2022 <a href="https://infosec.exchange/tags/Curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Curl</a> Security Audit by <a href="https://infosec.exchange/tags/trailofbits" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#trailofbits</a> was interesting as I've myself done quite a bit of digging into curl internals over the years. While there were many findings, only two of them were considered security vulnerabilities.2022 security audit: <a href="https://daniel.haxx.se/blog/2022/12/21/the-2022-curl-security-audit/" rel="nofollow noopener noreferrer" target="_blank">https://daniel.haxx.se/blog/2022/12/21/the-2022-curl-security-audit/</a>older post about increased CVE activity: <a href="https://daniel.haxx.se/blog/2022/08/22/increased-cve-activity-in-curl/" rel="nofollow noopener noreferrer" target="_blank">https://daniel.haxx.se/blog/2022/08/22/increased-cve-activity-in-curl/</a>

Dr. Roy Schestowitz (罗伊)<a class="hashtag" href="https://pleroma.site/tag/trailofbits" rel="nofollow noopener noreferrer" target="_blank">#trailofbits</a> on this dual license! :) but <a class="hashtag" href="https://pleroma.site/tag/microsoft" rel="nofollow noopener noreferrer" target="_blank">#microsoft</a> <a class="hashtag" href="https://pleroma.site/tag/github" rel="nofollow noopener noreferrer" target="_blank">#github</a> :( <a href="https://blog.trailofbits.com/2020/08/12/sinter-new-user-mode-security-enforcement-for-macos/" rel="nofollow noopener noreferrer" target="_blank">https://blog.trailofbits.com/2020/08/12/sinter-new-user-mode-security-enforcement-for-macos/</a>

Recent searches

Search options

Administered by:

Server stats:

#trailofbits