r1ru (@ri5255) profile picture

low-level programmer

Joined October 2021
Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)
I've released a blog series about modern Linux kernel exploitation, where you can learn some advanced techniques used in real-world kernel exploits. Enjoy! r1ru.github.io/categories/li…
4
265
2
971
47,031
ちなみにここで用いられている手法は、専門用語でFPCC (Foundational Proof-Carrying Code) と呼ばれる、2001年に提案された手法で、理論的には別に何も新しくないです。AIの進化によってようやく実用化できるようになったのがすごいところです dl.acm.org/doi/10.5555/87181…
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
2
1
30
2,505
一方、個人的にFPCCはやりすぎで、PCCの方が筋がいいと思っている。また、モジュラーに証明を行うためのlogicや、体系の健全性についての議論がなかったのが気になった。compilerから証明付きのバイナリを出力するなど、改善するためのアイデアは沢山あるので修論で実現したいね
1
300
セキュリティ× 形式検証は激熱の領域だと思っているので、私も形式検証の研究者見習いとして、実用化に貢献できるよう頑張っていきたい💪
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
2
1
43
2,046
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
668
1,072
644
9,790
2,123,210
10月から海外学振でさらに2年間、英国ケンブリッジ大学のComputer Science and Technologyにて研究を続けます。AIの定理証明能力が飛躍的に向上している今、その力を最大限応用した実用システムソフトウェアの形式検証の研究に真正面から取り組んでいます
1
8
121
4,474
弊社チームIkotas Labs, Inc.がPwn2Own Ireland 2026でMaster of Pwnの称号を得ました。これは最も多く難しいハッキングを成功させた事を意味します。今日だけは世界トップハッカーを名乗っても誰も文句は言わないでしょう😉
2
22
1
191
9,798
Introducing PageBreak, an agentic vulnerability discovery tool using deterministic validation to achieve a near-zero false positive rate. How it works: blog.google/security/agentic… For real-world vulnerabilities PageBreak has discovered 👇 bughunters.google.com/blog/p…
22
198
9
1,209
99,232
r1ru retweeted
i thought read() was a syscall wrapper, but it can dlopen a bytecode interpreter and execute your code "house of windy" turns this into leakless code execution with only OOB null byte writes pepsipu.com/blog/2026-09-dwa…
9
56
3
397
58,754
AOT CompilerがTCBに入っていたり、無限ループをkernel preemptionで防いでいたりとかなり力技なので、アイデアは面白いが、もうちょっと何とかできないかという感想
FUSEとWasmを利用して、既存のユーザー空間FUSEファイルシステムを、隔離された形でLinuxカーネル空間内で実行する手法の提案: usenix.org/conference/usenix…
1
5
633
FUSEとWasmを利用して、既存のユーザー空間FUSEファイルシステムを、隔離された形でLinuxカーネル空間内で実行する手法の提案: usenix.org/conference/usenix…
6
1
40
3,341
We're publishing our most detailed threat intelligence report to date. It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them. We disrupted every operation in the report, and used the lessons from them to strengthen our safeguards. Where appropriate, we also shared what we found with authorities and other AI companies. These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve. We’re publishing this report so others can spot the same activity on their own platforms, and so we can give the public a clearer view of how emerging threats develop. Read the report: anthropic.com/threat-intelli…
3,205
11,658
4,939
50,258
43,893,598
Today, Project Zero is releasing MAccConc, a tool by @tehjh that enables deterministic testing of race conditions on Linux. It can be used for fuzzing, ad-hoc exploration, regression tests and more! projectzero.google/2026/09/m…
4
114
4
446
40,614
10/23(金)発行予定の新刊『Windowsインフラのためのレッドチーム実践ガイド』の情報をAmazon、楽天で公開開始しました!ランサムウェア攻撃や標的型攻撃の目的の多くが最終的にActive Directoryの掌握となる現在、Windowsインフラの弱点を攻撃者の思考とともに学ぶ一冊です! amazon.co.jp/dp/4814401736
121
10
372
52,301
r1ru retweeted
Linux kernelで19年以上見過ごされていた0-day脆弱性を報告しました 悪用されると一般ユーザーからの権限昇格が可能になる脆弱性です 詳しくはこちら gmo-cybersecurity.com/blog/1…
24
278
13
1,650
290,571
就活しないとなぁ〜
1
13
2,303