<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Shaun Mirani on The Trail of Bits Blog</title><link>https://miscreants.github.io/blog.trailofbits.com/authors/shaun-mirani/</link><description>Recent content in Shaun Mirani on The Trail of Bits Blog</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 01 Mar 2024 09:30:25 -0500</lastBuildDate><atom:link href="https://miscreants.github.io/blog.trailofbits.com/authors/shaun-mirani/index.xml" rel="self" type="application/rss+xml"/><item><title>How we applied advanced fuzzing techniques to cURL</title><link>https://miscreants.github.io/blog.trailofbits.com/2024/03/01/toward-more-effective-curl-fuzzing/</link><pubDate>Fri, 01 Mar 2024 09:30:25 -0500</pubDate><guid>https://miscreants.github.io/blog.trailofbits.com/2024/03/01/toward-more-effective-curl-fuzzing/</guid><description>Near the end of 2022, Trail of Bits was hired by the Open Source Technology Improvement Fund (OSTIF) to perform a security assessment of the cURL file transfer command-line utility and its library, libcurl. The scope of our engagement included a code review, a threat model, and the subject of this blog […]</description></item></channel></rss>