I designed my first real part! www.printables.com/model/162187... No, I don't really know what I'm doing. Yes, it is satisfying anyway!

TIL about pypi-timemachine. You're welcome. (You know, for those 10-year old research projects without lock files)

snap: When you only care about 90% of your apps to work. It's been years. Why do major snaps (firefox!) still have usability issues?!

We live in such a wild time. theshamblog.com/an-ai-agent-...

openai.com/index/harnes... "What’s become clear: building software still demands discipline, but the discipline shows up more in the scaffolding rather than the code. The tooling, abstractions, and feedback loops that keep the codebase coherent are increasingly important."

x.com/mrexodia/sta... I concur with most of this advice on vibe coding.

youtu.be/wc_0ii3SLp0?... Gives me goosebumps...

I've seen a few of these AI skim tools, but I like Google scholar's new one: scholar.googleblog.com/2024/11/ai-o...

TIL that fine-tuning a PEFT adapter for a pretrained model (i.e., not a model fine-tuned for chat) is probably a bad idea. By default, PEFT adapters don't include the vocab embeddings, so it is more or less unable to learn the meaning of tokens not in pretraining like EOS. Whoops!

🚨 Blog Post: ""Idioms: A Simple and Effective Framework for Turbo-Charging Local Neural Decompilation with Well-Define... https://edmcman.github.io/blog/2026-01-15--idioms-a-simple-and-effective-framework-for-turbo-charging-local-neural-decompilation-with-well-defined-types-accepted-to-ndss-2026/

Reflecting on the success of our first SURE and beginning the planning for the next year!

Some days I hate computers. Today I've been debugging a packer build of windows 11 arm using vmware fusion, which is uncharted territory already. There were many problems. But the last and most frustrating was Mac silently blocking access to my "local network" bc I was in VS Code. 🤯

Today's cool visualization of the day is brought to you by arxiv.org/pdf/2512.14045 The world needs more Sankey diagrams.

I always felt like tqdm's ETA estimations were wildly inaccurate. It's because it defaults to using an exponentially weighted moving average with 0.3 weight. With high variance in job times and a lot of threads, that isn't going to work well. tqdm.github.io/docs/tqdm/#:....

Not a good vibe coding day. GH Co-pilot couldn't seem to figure out how to read a file. Problem 1: Task was given to sub-agent without the path. Oops. Problem 2: I had so many files in the workspace that search was timing out.

varlogsimon.leaflet.pub/3m6zrw6k2bs2p Back in my day, TLS was considered end to end encryption. Who did you think was going to be on the other "end" of your toilet besides Kohler? Your social contacts? 🚽

🚨 Blog Post: "Musings on Decompilation Artifacts" https://edmcman.github.io/blog/2025-12-06--musings-on-decompilation-artifacts/

Must-read for fuzzing folks (read: tooling/algorithms/academia) by Addison Crump addisoncrump.info/research/wha...

You've seen the trends in AIxCC: LLMs can hack source, find vulns, and patch them. But what about on binaries without source? Do decompilers close the gap, or is there more to grow? Come see my talk at DistrctCon where I merge and dissect these two fields: AI Hacking + Decomp.

This DecompileBench paper is pretty slick, especially how they test for semantic equivalence: arxiv.org/pdf/2505.11340 Unfortunately, there's a pretty big limitation that isn't addressed anywhere that I can see. Can you tell what it is?

PsycheC HuggingFace: huggingface.co/spaces/ejsch... Give it a C snippet and it will give you type and function declarations.

We're hiring: cmu.wd5.myworkdayjobs.com/en-US/SEI/de...

Doctor office: please sign this paperwork stating you received policy X. Me: Can I have policy X? Doctor office: Uhhh no one has ever asked for policy X before. 🤦

🚨 Blog Post: "Alias Blocking in Ghidra's Decompiler" https://edmcman.github.io/blog/2025-11-06--alias-blocking-in-ghidra-s-decompiler/

🚨 Blog Post: ""Systematic Testing of C++ Abstraction Recovery Systems by Iterative Compiler Model Refinement" Published at SURE 2025" https://edmcman.github.io/blog/2025-10-15--systematic-testing-of-c-abstraction-recovery-systems-by-iterative-compiler-model-refinement-published-at-sure-2025/

There should be a yearly one-day AWS scheduled outage day to smoke test for shit like "I bought a bed that depends 100% on us-east-1". (& all cloud providers with over $100m ARR). "AWS outage day?" "Yeah man, hoping my car starts driving again really soon here." "Toilet. Won't. Flush." "brutal."

Interesting article on the sustainability and profitability of AI companies. www.wheresyoured.at/costs/ Tldr: they aren't. It will be interesting to see how Cursor and GH Co-pilot fair over the coming months.

Hey internet. What is the best way to format source code in powerpoint in 2025? Things I would like: 1. Supports assembly code (rules out carbon) 2. Maintained and working (rules out VS Code codesnap/polacode)

This looks like a cool way to declaratively orchestrate data processing: snakemake.github.io How haven't I heard of this before?

calnewport.com/does-work-li... In graduate school, I worked 10 hour days on average, and did not work on weekends, unlike many of my colleagues. I knew that I couldn't do meaningful work beyond that. It is interesting to hear that Cal largely did the same thing!

TIL about the "Developer: Show Chat Debug View" command for GH Co-pilot.

🚨 Blog Post: ""Quantifying and Mitigating the Impact of Obfuscations on Machine-Learning-Based Decompilation Improvement... https://edmcman.github.io/blog/2025-07-11--quantifying-and-mitigating-the-impact-of-obfuscations-on-machine-learning-based-decompilation-improvement-published-at-dimva-2025/

"The dog ate our flight plan"?

Less than 24 hours to go! Get those submissions in 💻🔥⏩ sure25.hotcrp.com/

🚨 Blog Post: ""A Human Study of Automatically Generated Decompiler Annotations" Published at DSN 2025" https://edmcman.github.io/blog/2025-06-16--a-human-study-of-automatically-generated-decompiler-annotations-published-at-dsn-2025/

srcML Dockerfile... gist.github.com/edmcman/edff...

How did I not know about this? Also, why is it not enabled by default?! documentation.ubuntu.com/server/expla...

HF space for the Nova neural decompiler: huggingface.co/spaces/ejsch...

ACM CCS review quality has really gone downhill.

"To them, every line of C++ we write is like playing Russian Roulette — except all six chambers are loaded with undefined behavior." www.babaei.net/blog/rust-de...

If you're a grad student or an undergrad interested in research I need to you listen to me very carefully. You cannot learn to write good research papers if you do not read good research papers. Stop asking LLMs to summarize papers for you.

Just tried to redeem some old Google Play gift cards I found. They "expired" despite not having any expiration date on them.