🚨After a year-long embargo, our S&P paper is finally out! 📄Paper: aka.ms/enter-exit-l... 🔒AMD Advisory: aka.ms/AAwztqx 📝Summary: We develop the first tool to test security boundaries for uarch leaks -with no prior knowledge of CPU internals. It discovered Transient Scheduler Attack (TSA)... [1/2]

Prompt Injection is a top risk for use of LLMs, where untrusted data can cause a system to misbehave or leak data. We're hard at work on deterministic solutions to prevent or bound the risk, and just published a paper on our innovative information flow control approach: arxiv.org/pdf/2505.23643

When the smoke coming out of the Vatican is black and white checkerboard:

so which conclave are they running, SGX or TrustZone?

A powerful picture by the Economist. Somebody needs to have a serious talk with those white grandpas in the US. Source: www.economist.com/interactive/...

Russian negotiations 101: Always break your promises, but in a way that you can still claim you haven't *technically* broken your promises. (screenshot from today's Economist briefings)

taking my page tables for a walk

I'm so proud of Zelensky right now. Someone standing up to the bully is a breath of fresh air after months of ignorant BS. And what comes next is scary. Genuinely scary

Ukrainian journalists published the final draft of the UA-US mineral agreement. It's looking considerably less infuriating now, although still no commitment to security guarantees www.eurointegration.com.ua/eng/articles...

One thing I really miss about tech Twitter in the heyday of 2010-2020 is people sharing links to interesting blogposts (usually from people just writing down what they learned or what tech they were exploring). Those blog posts must still be somewhere there, but increasingly hard to find.

Recently found out that the Spotify Discover Weekly playlist can be connected to the Android clock and used as a morning alarm. Literally life-changing

now that DeepSeek has completed AI, we hope that Silicon Valley will turn its attention to the next best thing: investing in rural history museums

Learn about the risks of hallucination, jailbreaks and prompt injection and current mitigations in our ACM Queue paper:

Really cool and deep reverse engineering of speculative leaks in microcode

If Trump is removing all environmental regulation, how about we undo the "memory safe languages" mandate? I mean, how is mandating "memory safe languages" compatible with freedom of speech anyhow? Enough policing of speech! Raw pointers for raw milk, our youth needs to be hardened by strcpy.

Complete peace in Europe coming up in less than 20 hours from now. True story, guaranteed result