The cat is the Otocolobus Manul, https://xitter.cf/t.co/Xswt7Vp2F1 . Manul is the perfect privacy mascot. All views & opinions are my own & personal.

Joined August 2011
"Your browser extensions or network settings have blocked the security verification process required by [a news website] To resolve this, [turn off all defensive filters]". -- No thank you. I hope your news are worth what you're paying to protect them from readers like me.
1
6
301
After months of getting things done w/ Claude Code, I've spent ~5 days programming by hand in Lean and a liquid typed language and it's…SO GREAT? I love living in a world where I can get 1000s of mindless LOC in a minute, but also spend an hour on 10 gorgeous handcrafted lines.
27
10
229
8,001
sergey bratus retweeted
In the history of nuclear weapons safety, there was a debate between the military and the scientists at Sandia National Labs about whether traditional analog electronics were safe enough to control detonation. The labs demonstrated that in the case of a fire, the circuit boards could short and cause safety mechanisms to fail. This prompted the development of "strong links" in Enhanced Nuclear Detonation Safety (ENDS). They were designed such that it was physically impossible to activate from random electricity, fire, or a physical crash. They could only activate by a complex and unique "intent" signal that cannot possibly be produced by natural events. We are having a similar debate now around AI safety. The solution is to contain agents using signals that they cannot possibly produce. More history around this by @SteveBellovin : usenix.org/legacy/event/usen…
11
28
2
179
16,222
sergey bratus retweeted
Announcing our CFP Review Board for DistrictCon Year 2! We look forward to reading all of your amazing submissions on all things reverse engineering, tooling, exploits & vulns, and select non-technical and policy talks 🪩👾✌️ @perribus @bsdaemon @sergeybratus @rmspeers @jaylagorio @caseyjohnellis @ashl3y_shen
11
3
21
4,008
sergey bratus retweeted
One more Phrack 73 leak for you! Blueboxing Myths and Feelings: a nostalgic dive into phone phreaking’s golden age. archives.phrack.org/dl/73/bl… by @hackerschoice and @GammaTHC
2
36
1
141
7,214
Thrilled that our paper "Proof Repair and (Co)algebra Equivalences" with Trey Plante, Eric Paul, Cosmo Viola, and Alex Kavvos was (conditionally) accepted to POPL! Amazing work by my students, and wonderful collaboration with Alex.
Some of my awesome Ph.D. students and collaborators helped me finally understand what on earth I was doing in my Ph.D. thesis work in a way that is precise and generalizable. Like, they turned my vibes into a formalization. Just so excited about this trey3p.github.io/papers/prt.…
2
9
64
2,952
sergey bratus retweeted
Check out my latest blogpost. "Shiva modules for detecting advanced persistent threats in Linux: Shiva vs. Saruman": arcana-research.io/blog/shiv… The other day I released an updated version of Saruman for anti-forensics executable injection. This is essentially an APT (Advanced persistent threat) tool for stealthy injection of a program into a remote process. Very helpful for the offensive side, giving them a good way to hide their processes without needing a kernel rootkit. But what about the defensive side? Today I release a threat detection module for detecting Saruman thread injection. This threat detection engine was designed as a Shiva module in less than one day, and is a great example of how Linux threat detection and exploit mitigation monitors can be rapidly designed and installed with Shiva.
13
27
1,380
sergey bratus retweeted
Let me tell you how I delayed WinXP SP2 for a month. My software (BlackICE) was on the list of software that had to work. When they made major changes to the kernel network stack, my software broke. They grabbed their reverse engineers to figure out why. What they discovered was that my software doing something evil, patching the kernel's network stack when our software was loaded. That's tricky on a multi-CPU system with warring instruction/data caches. We wrote a patent on how to do it reliably without crashing the system. We searched through the kernel to find the location we needed to patch, looking for a certain pattern of bytes. They changed the network stack so that thing we were patching no longer existed. So to make our software work, the inserted that pattern back into the kernel. As packets arrived, the new function would jump to that pattern, and then after, jump right back. This way, we could find the pattern and patch it -- and thereby patch the intended function. Some Microsoft lawyers wanted to sue us for violating the software license agreement, which forbids reverse engineering, which we had to do in order to patch the kernel at runtime. Cooler heads prevailed. The point is our software did an ugly hack in order to work, and then Microsoft did an even crazier, uglier hack so that we'd keep working. For years after, when meeting Microsoft engineers at conferences, they'd love to yell at me. When Vista came along, they added signing of kernel models, putting an end to such nonsense, but also providing a real documented API we could use.
Microsoft once discovered SimCity was crashing on Windows 95 because SimCity had a memory bug. Instead of saying “not our problem,” Microsoft added a compatibility workaround just for SimCity. Because users don’t care whose bug it is. They care that software that worked yesterday still works today. Backwards compatibility is a feature.
17
58
2
760
62,540
sergey bratus retweeted
Today was the last class on assembly, and we had a competition! Students submitted assembly code to drive their Tron bot every tick. Both 1st and 2nd abused a teleportation bug to dominate the board. Very creative solutions!
1
3
32
1,631
sergey bratus retweeted
Happy to see our paper "Mind the Heap: Preventing Capability Leakage Across CHERI Compartments" accepted at @acm_ccs 2026. I'll be in The Hague in November to support the amazing @s_hamedgh keeping the heap exploitation spirit alive on CHERI hardware. sigsac.org/ccs/CCS2026/progr…
1
5
30
1,562