Trail of Bits

Have you heard? DPRK is #OpenToWork and hoping to land a remote role on your team! With our threat intelligence platform SEAL-ISAC, you can now check if documents, photos, & other identifiers sent by candidates are associated with known threat actors. Learn more in this post from Ryan Wegner, Director of Intelligence for SEAL-ISAC: https://lnkd.in/gaCegSX8 #CryptoSecurity

🐍 safehttpx - A 𝐬𝐞𝐜𝐮𝐫𝐞 𝐛𝐲 𝐝𝐞𝐟𝐚𝐮𝐥𝐭 Python HTTP client library. It performs DNS validation, preventing SSRF and DNS rebinding attacks. This prevents an attacker from scanning sensitive internal services, accessing cloud metadata services, etc. The library was created as as result of Trail of Bits’ security audit of Gradio 5 (Hugging Face). https://lnkd.in/gpDuEHFJ

💫 We would like to make the most of the weekend to announce two new sponsors, who have been GreHack supports for a long time: Trail of Bits and RandoriSec 💫 Thank you for allowing us to organize this exceptional edition 🎉

The Linux kernel 6.10 introduces the mseal syscall, advancing memory protection. This new system call implements "memory sealing," offering a unique approach to securing virtual memory. mseal differs from prior schemes by allowing developers to make specific memory regions immutable during runtime. Its kernel implementation modifies virtual memory operations, preventing tampering even with code execution privileges. Notably, mseal blocks malicious permissions tampering and mitigates memory unmapping attacks, addressing critical userspace exploit scenarios. https://hubs.la/Q02VNWNM0

Ian Smith will present his talk “IRENE: A Toolchain for High-Level Micropatching Through Recompilable Sub-Function Regions” at MILCOM this upcoming week.

🎙️ Bugcrowd founder Casey Ellis chats with Keith Hoodlet from Trail of Bits about bias in AI—and how hackers are using it to their advantage. Catch the full conversation on YouTube: https://lnkd.in/g96Gb-kv

Great news for users of Anthropic's "Computer Use"! Gradio has released safehttpx, a small Python library to help developers protect their applications from Server Side Request Forgery (SSRF) attacks. With LLMs now able to control computers, safety has never been this important. Attackers can potentially access sensitive internal services that are normally unreachable from the internet. Keeping this in mind, Gradio has released safehttpx with Trail of Bits: > Integrated in Gradio 5 too! > 𝚜𝚊𝚏𝚎𝚑𝚝𝚝𝚙𝚡 is a standalone repo that you can use in your own web framework for securely making GET requests. > This is the first Python library that lets you make asynchronous GET requests safely. Enjoy! Access the new library here: https://lnkd.in/g7Z-kt3S

🆕 𝚜𝚊𝚏𝚎𝚑𝚝𝚝𝚙𝚡: a new open-source library from the Gradio team This library is a product of our collaboration with Trail Of Bits and allows you to make asynchronous GET requests while avoiding Server Side Request Forgery. Why is this important? Many web frameworks, including Gradio, allow users of web applications to provide URLs, which are then fetched from the web server. For example, we let users provide URLs for the Image component. These images are automatically downloaded and displayed in the browser However, this exposes Gradio applications to Server Side Request Forgery (SSRF) attacks, which means attackers to make arbitrary HTTP requests from your server, potentially accessing sensitive internal services that are normally unreachable from the internet. Preventing SSRF is harder than it looks, as there are lots of varieties and peculiarities in the way that domain names are resolved. With Trail Of Bits, we addressed these vulnerabilities in Gradio 5. We've now extracted that logic into 𝚜𝚊𝚏𝚎𝚑𝚝𝚝𝚙𝚡 and created a standalone repo that you can use in your own web framework for securely making GET requests. To our knowledge, this is first Python library that lets you make asynchronous GET requests safely. Enjoy! https://lnkd.in/g7Z-kt3S

Our lightweight design review of AliLayer Labs' 6079 Proof of Inference Protocol (PoIP) highlighted the unique security risks when Blockchain meets AI. 📖 Read the report: https://hubs.la/Q02Vf3Zk0 The integrity of the cryptoeconomic security model PoIP is based on eliminating downstream exploitation benefits. 🔎 We focused on under-reviewed components of the AI stack, especially GPU configurations, and issues arising from the interaction between models and system security. From there, we provided recommendations on four critical components that demand attention to ensure system integrity and security. 1️⃣Transaction Management 2️⃣GPU Security 3️⃣Inference Engine Standard 4️⃣Protocol analysis Manipulating the Merkle tree process used to ensure transaction input correctness could potentially compromise the integrity of the entire system, which is just ✨one example✨ that showcases the need for rigorous validation of transaction processes, particularly in proving transaction inputs across nodes. We identified risks associated with GPU configurations, particularly in multitenant environments. Verifying and securing these setups is crucial to maintaining the integrity and confidentiality of ML computations within PoIP. We emphasized the potential impact of side-channel attacks. Node eavesdropping on each other could allow attackers to steal computation results, boosting their reputation and network control. This risk is heightened by token staking and DHT coordination, particularly if multiple malicious GPUs work together. What if an agent uses an energy-latency attack to force a denial of service of the model or an attacker performs prompt injection to force an AI agent to drain a wallet or forge transactions? 🤔 We recommended developing a secure inference engine standard to mitigate the risks of malicious agents and gateway nodes, especially in the context of model vulnerabilities. Our analysis also emphasized the importance of thoroughly examining the interplay between potential vulnerabilities in the protocol, infrastructure, and models to ensure comprehensive security. 🌟Our design review, alongside the code assessment, leveraged our AI and Blockchain expertise to offer a holistic view of AiLayer's security. To learn how we can help secure your integrated systems against sophisticated threats, schedule a call with us. https://hubs.la/Q02Vfb1x0

Catch Ian Smith on Sunday at SPLASH 2024, where he will present on recovering high-level type information in binary programs, an important part of reverse engineering and binary analysis https://hubs.ly/Q02S2qS20