Over the past few months, I have left my comfort zone and begun working on Agentic AI systems. For that, I am now trying to fill several roles, so if that sounds like something you'd like to work on with me, please get in touch.

We found a new vulnerability in TLS. It's a variant of the ALPACA attack that bypasses current countermeasures. Relativly low impact - but great insight! Check it out: opossum-attack.com

Oof. Reportedly, if you got a certificate from SSL.com by putting "example[@]gmail.com" at _validation-contactemail.example.com, they would add gmail.com (!!!) to your verified domains. A good reminder to use the CAA record, and to sign up for CT monitoring (e.g. Cert Spotter). https://bugzilla.mo

I spent the last few weeks playing with Claude code to refactor our codebase, add tests and documentations - and I am kind of impressed how useful it is. For 125$ I reached >97% code coverage with full javadoc for every function in one of our projects.

The 3rd edition of WISC – Women in Security and Cryptography Workshop will take place in Bochum from June 16 to 18. Already confirmed are talks by Lejla Batina, Zinaida Benenson, Shafi Goldwasser, Martina Lindorfer, and Doreen Riepel. Registration is open now! casa.rub.de/en/events/wi...

Join our Applied Crypto group at FAU in Nürnberg as a PhD student or spread the word: we're hiring. Our work covers many topics in real-world crypto, especially provable security and privacy of modern messaging protocols 🔐✉️ www.jobs.fau.de/jobs/7-phd-p...

Workshop on Secure Protocol Implementations in the Quantum Era (SPIQE), co-located with ACNS 2025. The submission deadline is March 23, 2025. More details: spiqe-workshop.github.io/call.html I am looking forward to seeing some exciting submissions! #Cryptography #SPIQE #ACNS2025

#FUZZING'25 CALL FOR PAPERS ────── ✨ New OC members: * Ruijie Meng (@ruijiemeng.bsky.social; NUS) * Rohan Padhye (@rohan.padhye.org; CMU). ✨ New paper type: Fuzzing Nuggets (short papers). 🔗 fuzzingworkshop.github.io 📅 20.March (Submission) 📅 17.April (Notification) 📅 28.June (Workshop)

Tbh - feels bad to deactivate my Twitter account - but at some point one has to choose a side.