Baidu Security X-Lab

@imp0rtp3 @Baidu_Inc @BaiduResearch We recommend that you send us a security vulnerability via email, send an email to security@baidu.com, the message titled [Vulnerability Feedback], please describe the vulnerability details in the email. See: bsrc.baidu.com/v2/#/en

@Baidu_Inc @BaiduResearch @BaiduXLab - I did not find any vulnerability submission contact or form for non-Chinese speakers. Could you point me somewhere? I have some ITW exploited vulnerability you should be aware of;)

Autonomous Vehicles (AVs) can choose different planned trajectories to avoid obstacles. Can you manipulate the driving trajectory of another vehicle such that the AV will yield and crash into a cardboard box on the road? Enjoy chasing!

New Demo Challenge is out! Check out AutoDrivingCTF.org As promised, a new demo challenge each week before the official contest date (Aug. 5 at 6 pm PT). This week, you will be hacking the “planning algorithm” in autonomous vehicles.

Welcome to AutoDriving CTF contest. Please join us at autodrivingctf.org

A while ago my group ASGuard attended the world's first-ever Autonomous Driving CTF Contest by @BaiduXlab , and won the 1st place! Quite fun to see new CTF problems on auto-driving like Invisible Truck & Mad Race. Here is a write-up of our fun experience: @asguard.research/invisible-truck-gps-hacking-mad-racing-first-person-view-of-worlds-first-ever-autonomous-9b2d5903672a" target="_blank" rel="nofollow noopener">medium.com/@asguard.resea…

Looking for summer intern/full time candidates for the Teaclave project (teaclave.apache.org) in Baidu. Contact me if you're interested.

The Teaclave Secure Computing Ecosystem - Projects Powered by Teaclave: teaclave.apache.org/blog/2020-12-0…

发现并协助修复数十处机密计算框架漏洞，百度安全获谷歌、微软致谢 link.medium.com/Cb5KJEfWWbb

@EnigmaMPC is using the Rust SGX SDK in Apache Teaclave (incubating) to implement a privacy preserving voluntary COVID-19 self-reporting platform for contact tracing (github.com/enigmampc/Safe…). Come and join our Teaclave community (github.com/apache/incubat…).

I just published Private Set Intersection Technology: A Hot Topic in Multi-Party Computing link.medium.com/pQ4w9JXY5Z

I just published OpenRASP: Protection against Vulnerabilities link.medium.com/JHjlMAfNjZ

Just released RPython by Example, please check it out if you are interested in RPython, a language designed for producing implementations of dynamic languages (e.g., PyPy @pypyproject ). mesapy.org/rpython-by-exa…

We are donating MesaTEE to Apache Foundation...Call for support and contributors...

MesaPy: A Memory-Safe Python Implementation Based on PyPy(2018) L: github.com/mesalock-linux… C: news.ycombinator.com/item?id=206832…

I just published MesaTEE Security Formal Verification in Action link.medium.com/1QmtUqvw1Y

I just published MesaTEE Open-Source Released: A Framework for Universal Secure Computing link.medium.com/wU0ttpFqdY

I just published Tackling AI Challenges in Safety-Critical Scenarios — A Review on Robustness of Deep Learning… link.medium.com/TigNZ9BABX

I just published MesaTEE GBDT-RS Open Source Released link.medium.com/6WPv6lLTkX

Baidu Security X-Lab @ RustCon Asia 2019 link.medium.com/nC4EZfXGSW

MesaLink v1.0.0 Released, Production Ready with 10 Million Monthly Users link.medium.com/yQsFRPIbLV