https://miscreants.github.io/blog.trailofbits.com/authors/pawe%C5%82-p%C5%82atek/Recent content in Paweł Płatek on The Trail of Bits BlogHugoen-usThu, 25 Sep 2025 00:00:00 -0400https://miscreants.github.io/blog.trailofbits.com/2025/09/25/taming-2500-compiler-warnings-with-codeql-an-openvpn2-case-study/Thu, 25 Sep 2025 07:00:00 -0400https://miscreants.github.io/blog.trailofbits.com/2025/09/25/taming-2500-compiler-warnings-with-codeql-an-openvpn2-case-study/We created a CodeQL query that reduced 2,500+ compiler warnings about implicit conversions in OpenVPN2 to just 20 high-priority cases, demonstrating how to effectively identify potentially dangerous type conversions in C code.https://miscreants.github.io/blog.trailofbits.com/2025/03/03/continuous-trail/Mon, 03 Mar 2025 00:00:00 -0500https://miscreants.github.io/blog.trailofbits.com/2025/03/03/continuous-trail/Learn how to integrate TRAIL threat modeling into your SDLC, adapt and maintain models as your system evolves, and use them to identify security control gaps.https://miscreants.github.io/blog.trailofbits.com/2024/09/24/notes-on-aws-nitro-enclaves-attack-surface/Tue, 24 Sep 2024 09:00:36 -0400https://miscreants.github.io/blog.trailofbits.com/2024/09/24/notes-on-aws-nitro-enclaves-attack-surface/In the race to secure cloud applications, AWS Nitro Enclaves have emerged as a powerful tool for isolating sensitive workloads.<br> But with great power comes great responsibility-and potential security pitfalls. As pioneers in confidential computing security, we at<br> Trail of Bits have scrutinized the attack surface of AWS Nitro Enclaves, uncovering potential bugs that could compromise even these<br> hardened environments.https://miscreants.github.io/blog.trailofbits.com/2024/02/16/a-few-notes-on-aws-nitro-enclaves-images-and-attestation/Fri, 16 Feb 2024 09:30:32 -0500https://miscreants.github.io/blog.trailofbits.com/2024/02/16/a-few-notes-on-aws-nitro-enclaves-images-and-attestation/AWS Nitro Enclaves are locked-down virtual machines with support for attestation. They are Trusted Execution Environments (TEEs), similar to Intel SGX, making them useful for running highly security-critical code. However, the AWS Nitro Enclaves platform lacks thorough documentation and mature tooling. So we decided to do some deep research into it […]https://miscreants.github.io/blog.trailofbits.com/2023/12/06/publishing-trail-of-bits-codeql-queries/Wed, 06 Dec 2023 08:30:25 -0500https://miscreants.github.io/blog.trailofbits.com/2023/12/06/publishing-trail-of-bits-codeql-queries/We are publishing a set of custom CodeQL queries for Go and C. We have used them to find critical issues that the standard CodeQL queries would have missed. This new release of a continuously updated repository of CodeQL queries joins our public Semgrep rules and Automated Testing Handbook in an effort […]