Post

How to get URL link on X (Twitter) App

On the Twitter thread, click on or icon on the bottom
Click again on or Share Via icon
Click on Copy Link to Tweet
Paste it above and click "Unroll Thread"!
More info at Twitter Help

Trail of Bits

Aug 13 • 5 tweets • 3 min read • Read on X

Trail of Bits is heading to the AIxCC finals! 🏆 Our Cyber Reasoning System, Buttercup, ranked in the top 7 out of 39 teams in the @DARPA AI Cyber Challenge semifinals @defcon 2024. buff.ly/4dGrdRz

@DARPA @defcon The AIxCC semifinals put CRSs to the test with challenges on real-world software like nginx and the Linux kernel. Buttercup took an early lead on the achievement board by being the first to patch vulnerabilities in nginx.
buff.ly/4djtJ09

@DARPA @defcon Buttercup’s success wasn’t just about finding bugs; it was about vulnerability remediation, a scoring element worth three times more than discovery. buff.ly/4cedjFa

@DARPA @defcon Congrats to all finalists and a huge thanks to our engineers who poured their expertise and passion into creating Buttercup. See you next year!

@DARPA @defcon More about AIxCC:
DARPA's AI Cyber Challenge: We're In!

DARPA awards $1 million to Trail of Bits for AI Cyber Challenge

Trail of Bits’ Buttercup heads to DARPA’s AIxCC
buff.ly/41jlEDN
buff.ly/4a7F1mj
buff.ly/4cedjFa

• • •

Missing some Tweet in this thread? You can try to force a refresh

This Thread may be Removed Anytime!

Twitter may remove this content at anytime! Save it as PDF for later use!

More from @trailofbits

Trail of Bits

@trailofbits

Jan 16

Today, we are disclosing LeftoverLocals, a vulnerability that allows listening to LLM responses through leaked GPU local memory created by another process on Apple, Qualcomm, AMD, and Imagination GPUs (CVE-2023-4969) buff.ly/48RDP68

Our PoC can listen to another user's llama.cpp session across process or container boundaries. LeftoverLocals can leak ~5.5 MB per GPU invocation on an AMD Radeon RX 7900 XT running a 7B model on llama.cpp, adding up to ~181 MB for each LLM query. buff.ly/41WKaLf

LeftoverLocals impacts the security posture of GPU applications, especially LLMs and ML models that run on impacted GPU platforms. It highlights that many parts of the ML development stack, specifically GPUs, have unknown security risks. Read more: buff.ly/3SjHYu0

Read 4 tweets

Trail of Bits

@trailofbits

Nov 14, 2023

The @raft_fi issue is complex and we're actively investigating it. We've offered to help their team however we can. Here's some of what we know so far:

Raft published the exploit details here:

tl;dr get the pool into an unbalanced state, repeatedly mint 1 share because `divUp` mints more than expected, then redeem elsewhere.mirror.xyz/0xa486d3a7679D…

We were the first team to help Raft fortify their codebase in a brief 2 person-week project. We found 8 issues, including several arithmetic issues, and reported the long-term improvements we believed were necessary.
github.com/trailofbits/pu…

Read 14 tweets

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Share this page!

Enter URL or ID to Unroll

Trail of Bits

Try unrolling a thread yourself!

More from @trailofbits

Trail of Bits

Trail of Bits

Did Thread Reader help you today?

Don't want to be a Premium member but still want to support us?

Send Email!