Sign in

darkamaul.bsky.social

@darkamaul.bsky.social
34 followers 147 following 1 posts

Security Engineer @ Trail Of Bits

PostsRepliesMedia
Reposted by @darkamaul.bsky.social
EuroPython 2026, Kraków @europython.eu · 30/07/2026
What does it take to keep Python secure for the next decade? 🔒🐍 William Woodruff explores the future of Python security, evolving threats, and how defenders need to adapt during this #EuroPython2026 keynote. 🎥 Watch now!! www.youtube.com/watch?v=wMPe...
youtube.com
Keynote: Securing Python for the next decade - William Woodruff
[EuroPython 2026 - Keynote - S1 on 2026-07-17] 🎤 *Securing Python for the next decade by William Woodruff* 🔗 https://ep2026.europython.eu/session/securing-python-for-the-next-decade 📝…
072
Reposted by @darkamaul.bsky.social
Romain Thomas (@rh0main) @rh0main.bsky.social · 13/07/2026
10 years after its first release, LIEF 1.0.0 is officially out with a brand-new Runtime API and DWARF/PDB -> C/C++ generation! lief.re/blog/2026-07...
095
Reposted by @darkamaul.bsky.social
Hervé Schauer @herve-schauer.bsky.social · 23/03/2026
Le #SSTIC ne semble toujours pas sur BlueSky 😢 Programme en ligne : www.sstic.org/2026/program...
sstic.org
SSTIC2026 » Programme du 3 au 5 juin 2026
088
Reposted by @darkamaul.bsky.social
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 13/12/2025
Dependency cooldowns, redux blog.yossarian.net/2025/12/13/coold… #security #oss
041
Reposted by @darkamaul.bsky.social
Mike Fiedler @miketheman.com · 26/11/2025
There's a nasty #OpenSource #SupplyChain worm going around named Shai-Hulud. It's also capable of exposing some projects' long-lived PyPI API Tokens. Read more on what's happening, and what you can do to protect your projects. TL,DR: Adopt Trusted Publishing 🔐🚀📦 blog.pypi.org/posts/2025-1...
blog.pypi.org
PyPI and Shai-Hulud: Staying Secure Amid Emerging Threats - The Python Package Index Blog
Shai-Hulud is a great worm, not yet a snake. Attack on npm ecosystem may have implications for PyPI.
12517
Reposted by @darkamaul.bsky.social
Nadim Kobeissi @nadim.computer · 06/08/2025
I'm thrilled to announce that after months of intensive work, the complete materials for my Applied Cryptography course at the American University of Beirut are now finished: both Part 1 (Provable Security) and Part 2 (Real-World Cryptography)!
4329
Reposted by @darkamaul.bsky.social
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 01/05/2025
my colleague @darkamaul.bsky.social has a new blog post on the @trailofbits.bsky.social blog about how we worked with @pypi.org's maintainers to slash test times on PyPI by over 80%: blog.trailofbits.com/2025/05/01/m...
blog.trailofbits.com
Making PyPI's test suite 81% faster
See how we slashed PyPI’s test suite runtime from 163 to 30 seconds. The techniques we share can help you dramatically improve your own project’s testing performance without sacrificing coverage.
063
Reposted by @darkamaul.bsky.social
Romain Thomas (@rh0main) @rh0main.bsky.social · 28/04/2025
Fuzzing Windows ARM64 binaries with a DBI and LLVM? Here we go: www.romainthomas.fr/post/25-04-w...
045
Reposted by @darkamaul.bsky.social
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 06/12/2024
zizmor would have caught the Ultralytics workflow vulnerability blog.yossarian.net/2024/12/06/zizmo… #security #oss
2177
darkamaul.bsky.social @darkamaul.bsky.social · 27/11/2024
Excited to be part of the lineup at @districtcon.bsky.social first conference! Can't wait to see everyone in Washington DC
010