https://miscreants.github.io/blog.trailofbits.com/authors/artur-cygan/Recent content in Artur Cygan on The Trail of Bits BlogHugoen-usThu, 31 Oct 2024 09:00:18 -0400https://miscreants.github.io/blog.trailofbits.com/2024/10/31/fuzzing-between-the-lines-in-popular-barcode-software/Thu, 31 Oct 2024 09:00:18 -0400https://miscreants.github.io/blog.trailofbits.com/2024/10/31/fuzzing-between-the-lines-in-popular-barcode-software/Fuzzing—one of the most successful techniques for finding security bugs, consistently featured in articles and industry conferences—has become so popular that you may think most important software has already been extensively fuzzed. But that’s not always the case. In this blog post, we show how we fuzzed the ZBar barcode scanning library […]https://miscreants.github.io/blog.trailofbits.com/2024/01/26/enhancing-trust-for-sgx-enclaves/Fri, 26 Jan 2024 09:00:31 -0500https://miscreants.github.io/blog.trailofbits.com/2024/01/26/enhancing-trust-for-sgx-enclaves/Creating reproducible builds for SGX enclaves used in privacy-oriented deployments is a difficult task that lacks a convenient and robust solution. We describe using Nix to achieve reproducible and transparent enclave builds so that anyone can audit whether the enclave is running the source code it claims, thereby enhancing the security of […]