PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Rust-proof your code with our new Testing Handbook chapter

blog.trailofbits.com | blog | #rust | #secure-coding | #software-testing | #tooling | #static-analysis | #testing | #trail-of-bits | #security-handbook
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits added a Rust testing chapter to its Testing Handbook: Miri, property testing, Clippy, zeroization, Kani model checking and dependency vetting, plus the rust-review Claude Code plugin.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Auditing in the age of (good enough) AI
Trail of Bits explains how agents built tooling and a Lean model for the Miden zkVM audit, finding a flaw enabling Falcon signature forgery and yielding 95 machine-checked proofs.
blog · netspi.com
Rust’s Role in Embedded Security
Rust improves memory safety in embedded systems, eliminating entire vulnerability classes, but logic, hardware, and cryptographic flaws still demand rigorous security testing.
blog · netspi.com
The Way Back Machine – Microsoft Word for Windows 1.1a
After Microsoft open-sourced Word for Windows 1.1a, a CheckMarx scan of the 1980s C++ codebase surfaced strcpy-style unsafe functions and 123 gotos—showing how far secure coding has come.
blog · blog.trailofbits.com
Your AI agent fixed the bug, but what else did it change?
We’re publishing patching-bugs and regression-hunt, two plugins that let engineers delegate patch development and regression checks to agents.
blog · blog.trailofbits.com
SequenceHash: multihashing for the rest of us
We're releasing SequenceHash and its sister function SequenceMAC, a pair of related hash constructions that bring secure multihashing to developers using hash functions other than Keccak.
blog · blog.trailofbits.com
1Password's AI patching benchmark is misleading
Trail of Bits says 1Password's FLAWED benchmark misstates AI patch quality, mixing wrong-fix prompts and no-test trials into a 26% clean-fix headline, and ships two agent skills for better fixes.
Back