Giving a talk to 39c3 today on our work "Wallbleed: A Memory Disclosure Vulnerability in the Great Firewall of China" and more! fahrplan.events.ccc.de/congress/202... Come say hi :3

Why are experts warning against the development of superintelligence? In a new video we partnered with SciShow on, Hank Green explains the concerning trends we see in AI. SciShow has over 8M subscribers. It's great to see so many people learn about this problem! [link below]

Great article about how TEEs are providing much less security than folks believe they will. arstechnica.com/security/202...

Politics over who gets the good offices/cubicles are honestly kinda fun. I sort of wish those were the only politics I had to worry about.

I've been spending a lot of time with the Geedge Networks leak, and I can't shake the idea that the name is vaguely Dutch. Vergeef mij, Fang Binxing, want ik heb geedged!

Can we have a law called the "if you vote no on this bill you love kicking puppies act" that bans congresspeople from picking these ridiculous and deceptive names?

The torrent has reportedly been sort of slow to download. If you, like me, are a security researcher doing fun things with this data, you should use your fancy university/company servers to help seed :)

Having graded enough handwritten exams (we use a lot of those in CS, scanned and thrown through gradescope), it can be hard to interpret just a single sentence. I would NOT want to grade a bunch of blue-book essays... I suspect MANY courses are going to need locked-down computer labs.

Migrated to my own PDS! ATProto is pretty neat.

One of the things that amazes me about scientific research is how much work goes into it. It’s just crazy. I mean all things require work, but it’s just so far above anything else (writing, software development.) I understand all the complaints about replication, what’s missing is the labor.

As instructors we must deal with this before it's too late. "Don't use AI" isn't really a sufficient guardrail. x-post from x.com/GarrettPeter...

Citizen Lab director warns cyber industry about US authoritarian descent techcrunch.com/2025/08/06/c...

Tom Scott making good stuff as always (11 years ago) youtu.be/RIuf1V1FhpY

Getting into big security conferences may be difficult, but I'm grateful to have never seen anything as bad as "who is adam"

GWU was very welcoming of @pet-symposium.bsky.social attendees. The nearby whole foods, not so much.

Users under China's censorship regime receive injected responses for bogus black-hole IP addresses when they try to do DNS lookups for censored domains. But what if those IPs weren't just bogus, but potentially malicious? This week we presented our work: "I'll Shake Your Hand" to FOCI about this.

ICEBlock is incredibly false privacy claims for marketing. They falsely claim it provides complete anonymity when it doesn't. They're ignoring both data kept by Apple and data available to the server but not stored. They're also spreading misinformation about Android: www.iceblock.app/android

I'm excited to start work for SPHERE (sphere-project.net) on reproducible internet censorship research this summer!

OTF President Laura Cunningham: The immediate consequence is that if this holds, over 45 million people will lose access to trusted and secure VPNs, leaving them exposed to authoritarian surveillance and persecution.

Someone passed this along: Mullvad is debuting a new traffic-analysis prevention service that adds generated cover traffic and uses constant packet sizes. mullvad.net/en/blog/intr...

So here’s a simple request to Apple. Apple iMessage needs to enable “disappearing messages.” And they need to do it soon. blog.cryptographyengineering.com/2025/03/01/d...

Wallbleed: A Memory Disclosure Vulnerability in the Great Firewall of China gfw.report/publications...

Protip for anyone teaching a binary exploitation course: Gradescope's Docker container has ASLR enabled, but a cloud-init vm running in qemu-system-x86_64 does not :D

Hello, world!