Boom! Valentina Palmiotti wastes no time kicking off #Pwn2Own Berlin in style. She requires just a few second to get code execution on the NV Container Toolkit. She heads off to the disclosure room to provide all the details.

We long for a simple time and the rush of the cascade of cards

I miss infosec twitter some days

The Unprompted.au CFP is officially OPEN! If you are doing cool stuff with AI in offense, defense, or working on core AI tech (from frontier models to open source LLMs), we'd love to hear from you! Submit here: www.unprompted.au

Submit your talks and come hang out in the best city

This is good snow

I am so proud of this

I am so honored that I got to be a part of junkyard! Such an exciting idea to encourage hacking for the sake of hacking and revel in the fun and curiosity. Being a judge went by so fast! But I am happy I got to be on stage with my friends and that I was trusted to adjudicate such awesome research.

DisCo nails 🪩

I’ll still be at DisCo repping for @interruptlabs.bsky.social

So excited for junkyard!

See everyone there!

My From Plug to Pwn lightning talk from @kawaiicon.bsky.social is now up ⚡️ 15 minutes of embedded devices, firmware poking, and a few Pwn2Own stories. Huge thanks to the Kawaiicon crue for having me, such a fun con. youtu.be/8gU5BOyMp_U?...

Super excited for my new adventure!

Wow taking actual vacation time is awesome. Who knew

Brb going to get lost on a mountain

I really got lazy w socials for a bit but I’m back, baby.

Au revoir, Paris

Interested in Submitting to Junkyard? Want to hang out with fellow researches? Workshopping ideas? Come hang out with the Junkyard Team for a Virtual Happy Hour! Wednesday October 1, 8pm ET (5pm PT) (1, maybe 2 hours?) RSVP: luma.com/949joy6c

Summercon CFP is up!

We're currently hiring experienced researchers, particularly focusing on the areas of iOS, Android, Browser, and 0click. If you're interested, please reach out: <[email protected]>

The update comes just hours after a subset of the CVE Board said it plans to break off to maintain the CVE Program under a new body called the CVE Foundation. Unclear what happens next, but the new group could have a role in future contracting discussions: www.thecvefoundation.org

Gazing across the throngs at this month’s NYSEC, all we can think is: can’t wait to see you all again in July. Summercon 2025 July 11–12 @ Littlefield, Brooklyn Tickets: www.eventbrite.com/e/summercon-...

Reminder

My beloved ADHD partner has set an alarm to tell them to go to bed at 11pm. Its Bernadette Peters singing "I got the sun in the morning." An 11 o'clock number. We do a great production at this point.

Very neat talk

Reminder: use full-disk encryption and shut down (not suspend) your laptop when crossing international borders. Be prepared to potentially give up any device you are not willing to unlock for customs officials. 💚 Buy me a drink and ask me about Columbia some time 😉

I’ve posted before about how I need instrumental, non-familiar music to focus. Instrumental, prog and soundtracks/orchestrations tend to work best. This week’s work is brought to you by A Bug’s Life.

I came to ChatGPT to help me sort out dependency hell and it told me what I was asking would “likely be a *huge dependency nightmare*”…don’t I know it

Use Signal to talk about protests Use Signal to talk about your wordle score Use Signal to talk about abortion Use Signal to talk about your mom's knitting club Use Signal to talk about parties Use Signal to talk about gender affirming care Use Signal to talk about the weather Use Signal

We love all dogs

@re-verse.io was fantastic and my friends are incredible 🥹

Ready for day two @re-verse.io !!

Ready to kick this thing off! Photo ops in the sponsor room at @re-verse.io

In the words of Taylor Swift, “fuck me up, Florida.” Hope @re-verse.io is ready!

Trenchant is a Silver Sponsor of RE//Verse 2025! As a trusted and discreet industry leader in vulnerability research and capability engineering, they are solving some of the most difficult and interesting problems, across the hardest targets. Learn more: www.trenchant.io

Manager: "What's this milestone 'Living on a prayer' ?" Me: "That's the documentation deliverable." Manager: "What's the status of that?" Me: "We're halfway there" Manager: "Why is progress so slow?" Me: "You fired Tommy" Manager: "So?" Me: "Tommy used to work on the docs"

The junkyard at @districtcon.bsky.social is so fun to see!!!! Loving this

Periodically folks will tell me they can’t find my ghidra blog. It’s cuz l3h sometimes shifts where my blog is, and it’s down rn for some reason. But whatever, wayback machine has my back web.archive.org/web/20220513...

Bestie is killin it

Lightning submissions are open! If you're coming to RE//verse and have an interesting topic that isn't ready for a full talk, email [email protected] with a description for a 5-10m lightning slot. The process is informal and open to all attendees. Sign-ups available throughout the event as well.

I am so excited to see so many of my fav people at @districtcon.bsky.social this weekend!!!!

There’s a lot going on in the world but I gotta make time to do things that make me smile

Killer lineup! Can’t wait to attend. If you are into reverse engineering, check out the new Re-Verse conference, launching in February! The team behind it is incredible. This is going to be the new Infiltrate.

It was a fantastic last Shmoo. 🥹 A genuine thanks for the memories

Ngl super hype for @rgblights.bsky.social to speak

Ok ok these are really neat. (I guess I didn’t get the nums after all. I went w the cheapest option to try out.) so far the feel is gooood