Thanks for inviting me @simonsinstitute.bsky.social The audience interaction was incredible.

LLM-integrated applications and agents are vulnerable to prompt injection attacks, in which adversaries embed malicious instructions within seemingly benign user inputs to manipulate the LLM’s intended behavior.

Recently, we received a DARPA grant on the problem of LLM-assisted translation of C to Rust. The team consists of amazing set of PIs from UW, Berkeley, UIUC, and Edinburgh. Really excited about what we can do. Full article can be found here: www.cs.wisc.edu/2025/07/15/t...

I have interacted with @gautamkamath.com and highly recommend him for this position. Please vote for him.

This research took a while to complete, but very proud of the result. Will do a detailed post soon.

SAGAI 2025 program is now complete. What an amazing program! Don't miss it. sites.google.com/corp/ucsd.ed...

Welcome Lucy.

SAGAI'25 will investigate the safety, security, and privacy of GenAI agents from a system design perspective. We are experimenting with a new "Dagstuhl" like seminar with invited speakers and discussion. Really excited about this workshop at IEEE Security and Privacy Symposium.

Interesting! Didn't know that sifr and sunya are connected.

Eid Mubarak to anyone of my friends that celebrate it. www.youtube.com/watch?v=5hwX...

Excellent place to work!

Lorenzo graduated from my group and did some cool work on system and network security during his Ph.D. Congrats, Lorenzo! Proud of you.

Have you ever wondered: In federated learning, what if we could leverage clients' private data without compromising privacy—what more could we achieve? 🚀 We're excited to introduce SLVR (Securely Leveraging Client Validation for Robust Federated Learning). Paper: arxiv.org/pdf/2502.08055

Happy Holi to everyone who celebrates it. www.youtube.com/watch?v=-l8K...

ICC Champions. Congrats. Great match. www.youtube.com/watch?v=6iqE...

Nicholas Carlini moves to Anthrophic. nicholas.carlini.com/writing/2025...

Have you wondered about the following question? Is it possible to design an image watermark that (a) preserves the robustness of deep watermarks and (b) meets a well-defined notion of unforgeability and public-detectability? We address this question in arxiv.org/pdf/2502.04901

👇 Thoughts?

If you want me to respond to your email, please don't start the email with "Dear Sheldon":-)

Amazing program at @satml.org 2025 in now online.

Finally, after few attempts our paper will appear in iacr communications of cryptology. cic.iacr.org/p/1/4/31 Our paper presents the first provable watermarking scheme for large language models (LLMS) with public detectability or verifiability

I was saddened to learn about Prof. Bob Brayton's demise. Interesting anecdote. My advisor, Ed Clarke, had a grant with him (I think from SRC). After the events, he wanted to go to a resturant but insisted in going where students eat and not something fancy.

In-person PC meetings have become relics of the past. I remember them very fondly, and in my opinion in-person PC meetings led to better decisions. Thoughts?

Cool work!

Happy New Year to all! May 2025 be prosperous and full of great success.

Registration for @satml.org is open. The program is shaping up to be really interesting. eventsignup.ku.dk/ieeesatml202...

Technical question. Is there a notion of how "hard" a probability distribution is? Let me explain. Intuitively, a distribution induced by a probabilistic finite-state machine (FSM) is "harder" than one induced by a probabilistic CFG.

Interesting result.

Beautiful rendition of a ghazal by Faraz. www.youtube.com/watch?v=tWLx...

Happy to share the following paper on watermarking with an amazing set of co-authors. The paper led by Xuandong Zhao deals with several questions related to watermarking. Feedback welcome, and please reshare. arxiv.org/html/2411.18...

Recollection about the paper. David Long already had the algorithm but didn't have the proof. He told me if I can prove its correctness, he will put my name. Worked full 2-3 weeks to get the proof. Ah, such is ambition of youth...

CAV on bluesky. My first paper was published in cav My first paper at CAV: link.springer.com/chapter/10.1...

Registration is open for SaTML. Travel scholarships are also available. Will appreciate reshares. satml.org

Absolutely scary!

Registration for SaTML is open! Should be a great conferences. Also, check out the great keynote speakers. Please share. satml.org

Are folks simultaneously maintaining handles on both Bluesky and X?