#trailofbits — Public Fediverse posts on home.social

Script Kiddie @[email protected] · 2026-04-22 · 05:33 UTC

The #Swisscows CEO confirmed a “technically possible but artificially constructed scenario.” Trail of Bits, for its part, refers to a “misrepresentation” of the #exploit by Swisscows: “The core problem is that Teleguard’s server has all the information needed to decrypt every user’s private key and read every message,” said #DanGuido, co-founder and CEO of #TrailOfBits .

#teleguard #chat #messenger #security #encryption #hack #hacker #software #fail #omg #wtf #news #meme #bug #internet #spy #attack #end2end #rsa

#news #internet #software #encryption #security #meme

Script Kiddie @[email protected] · 2026-04-22 · 05:33 UTC

source: 404media.co/a-secure-chat-apps…

The #Swisscows CEO confirmed a “technically possible but artificially constructed scenario.” Trail of Bits, for its part, refers to a “misrepresentation” of the #exploit by Swisscows: “The core problem is that Teleguard’s server has all the information needed to decrypt every user’s private key and read every message,” said #DanGuido, co-founder and CEO of #TrailOfBits .

#teleguard #chat #messenger #security #encryption #hack #hacker #software #fail #omg #wtf #news #meme #bug #internet #spy #attack #end2end #rsa

#news #internet #software #encryption #security #meme

Script Kiddie @[email protected] · 2026-04-22 · 05:33 UTC

source: 404media.co/a-secure-chat-apps…

The #Swisscows CEO confirmed a “technically possible but artificially constructed scenario.” Trail of Bits, for its part, refers to a “misrepresentation” of the #exploit by Swisscows: “The core problem is that Teleguard’s server has all the information needed to decrypt every user’s private key and read every message,” said #DanGuido, co-founder and CEO of #TrailOfBits .

#teleguard #chat #messenger #security #encryption #hack #hacker #software #fail #omg #wtf #news #meme #bug #internet #spy #attack #end2end #rsa

#news #internet #software #encryption #security #meme

hasamba @[email protected] · 2026-02-12 · 12:06 UTC

----------------

🛠️ Tool
===================

Opening: Trail of Bits maintains an opinionated configuration repository for working with Claude Code that codifies defaults, workflows, and recommended patterns for security audits, development, and research. The project documents approaches for sandboxing, permission handling, extensibility via hooks and skills, and options for MCP servers and local models.

Key Features:
• Sandboxing and permissions: clear guidance on restricting agent capabilities and separating risky actions from privileged contexts.
• Hooks and skills: patterns for extending Claude Code with custom hooks and reusable skills to automate common audit tasks.
• MCP server patterns: documented layouts and usage patterns for Model Context Protocol servers to centralize context management across sessions.
• Local model support: notes and recommendations for running local models with tools such as LM Studio and headless daemons like llmster.
• Terminal and session guidance: recommended terminal (Ghostty) and operational notes for handling long, high-volume Claude Code sessions.

Technical Implementation:
• The repository presents opinionated configuration files, integration points for hooks/skills, and documented MCP server topologies rather than executable scripts.
• Design choices emphasize principle-of-least-privilege for agent actions, separation of IO-bound operations into isolated sandboxes, and modular skill injection to keep sessions auditable and reproducible.

Use Cases:
• Security audits where an analyst needs repeatable LLM-driven workflows constrained by explicit permission boundaries.
• Development and research setups requiring local model experimentation, context servers, and consistent session tooling.
• Teams that require a shared baseline for Claude Code sessions to reduce variance across engagements.

Limitations:
• The repository is opinionated and reflects Trail of Bits operational preferences; it may not fit all organizational policies or threat models.
• Some components referenced (terminals, local model tooling) assume platform compatibility and may require alternative choices in constrained environments.

References:
• Core concepts include claude-code-config, Ghostty, LM Studio, llmster, and MCP patterns. Documentation focuses on capabilities and integration patterns rather than installation or runtime instructions.

🔹 tool #claudecode #mcp #sandboxing #trailofbits

🔗 Source: https://github.com/trailofbits/claude-code-config?tab=readme-ov-file

#trailofbits #sandboxing #mcp #claudecode

N-gated Hacker News @[email protected] · 2026-01-07 · 21:32 UTC

👨‍💻 Wow, an "amazing" discovery: code has bugs 🐞—who would've guessed?! 🎉 Trail of Bits bravely announces they used a tool to find issues, as if highlighting a #zero-day is akin to finding Waldo in a single-page book. 🤦‍♂️
https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/ #amazingdiscovery #codebugs #TrailofBits #findings #softwareissues #HackerNews #ngated

#zero #amazingdiscovery #codebugs #trailofbits #findings #softwareissues

N-gated Hacker News @[email protected] · 2026-01-07 · 21:32 UTC

👨‍💻 Wow, an "amazing" discovery: code has bugs 🐞—who would've guessed?! 🎉 Trail of Bits bravely announces they used a tool to find issues, as if highlighting a #zero-day is akin to finding Waldo in a single-page book. 🤦‍♂️
https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/ #amazingdiscovery #codebugs #TrailofBits #findings #softwareissues #HackerNews #ngated

#zero #amazingdiscovery #codebugs #trailofbits #findings #softwareissues

N-gated Hacker News @[email protected] · 2026-01-07 · 21:32 UTC

👨‍💻 Wow, an "amazing" discovery: code has bugs 🐞—who would've guessed?! 🎉 Trail of Bits bravely announces they used a tool to find issues, as if highlighting a #zero-day is akin to finding Waldo in a single-page book. 🤦‍♂️
https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/ #amazingdiscovery #codebugs #TrailofBits #findings #softwareissues #HackerNews #ngated

#ngated #hackernews #softwareissues #findings #trailofbits #codebugs

N-gated Hacker News @[email protected] · 2026-01-07 · 21:32 UTC

👨‍💻 Wow, an "amazing" discovery: code has bugs 🐞—who would've guessed?! 🎉 Trail of Bits bravely announces they used a tool to find issues, as if highlighting a #zero-day is akin to finding Waldo in a single-page book. 🤦‍♂️
https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/ #amazingdiscovery #codebugs #TrailofBits #findings #softwareissues #HackerNews #ngated

#zero #amazingdiscovery #codebugs #trailofbits #findings #softwareissues