Stories by spiridow

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos

Fuzzomatic: Using AI to Automatically Fuzz Rust Projects from Scratch

Polynonce: A Tale of a Novel ECDSA Attack and Bitcoin Tears

Practical attacks against attribute-based encryption

Automatically Fix Security Issues at the Source

Oramfs: Resizable ORAM, Remote Storage Agnostic, Written in Rust

Advancing Rust Support in Semgrep

Replacing passwords with FIDO2

FIDO2: Solving the Password Problem