The cat is the Otocolobus Manul, https://xitter.cf/t.co/Xswt7Vp2F1 . Manul is the perfect privacy mascot. All views & opinions are my own & personal.

Joined August 2011
"Your browser extensions or network settings have blocked the security verification process required by [a news website] To resolve this, [turn off all defensive filters]". -- No thank you. I hope your news are worth what you're paying to protect them from readers like me.
1
6
292
After months of getting things done w/ Claude Code, I've spent ~5 days programming by hand in Lean and a liquid typed language and it's…SO GREAT? I love living in a world where I can get 1000s of mindless LOC in a minute, but also spend an hour on 10 gorgeous handcrafted lines.
27
10
229
7,999
sergey bratus retweeted
In the history of nuclear weapons safety, there was a debate between the military and the scientists at Sandia National Labs about whether traditional analog electronics were safe enough to control detonation. The labs demonstrated that in the case of a fire, the circuit boards could short and cause safety mechanisms to fail. This prompted the development of "strong links" in Enhanced Nuclear Detonation Safety (ENDS). They were designed such that it was physically impossible to activate from random electricity, fire, or a physical crash. They could only activate by a complex and unique "intent" signal that cannot possibly be produced by natural events. We are having a similar debate now around AI safety. The solution is to contain agents using signals that they cannot possibly produce. More history around this by @SteveBellovin : usenix.org/legacy/event/usen…
11
28
2
179
16,220
sergey bratus retweeted
Announcing our CFP Review Board for DistrictCon Year 2! We look forward to reading all of your amazing submissions on all things reverse engineering, tooling, exploits & vulns, and select non-technical and policy talks 🪩👾✌️ @perribus @bsdaemon @sergeybratus @rmspeers @jaylagorio @caseyjohnellis @ashl3y_shen
11
3
21
4,005
sergey bratus retweeted
One more Phrack 73 leak for you! Blueboxing Myths and Feelings: a nostalgic dive into phone phreaking’s golden age. archives.phrack.org/dl/73/bl… by @hackerschoice and @GammaTHC
2
36
1
141
7,192
Thrilled that our paper "Proof Repair and (Co)algebra Equivalences" with Trey Plante, Eric Paul, Cosmo Viola, and Alex Kavvos was (conditionally) accepted to POPL! Amazing work by my students, and wonderful collaboration with Alex.
Some of my awesome Ph.D. students and collaborators helped me finally understand what on earth I was doing in my Ph.D. thesis work in a way that is precise and generalizable. Like, they turned my vibes into a formalization. Just so excited about this trey3p.github.io/papers/prt.…
2
9
64
2,952
sergey bratus retweeted
Check out my latest blogpost. "Shiva modules for detecting advanced persistent threats in Linux: Shiva vs. Saruman": arcana-research.io/blog/shiv… The other day I released an updated version of Saruman for anti-forensics executable injection. This is essentially an APT (Advanced persistent threat) tool for stealthy injection of a program into a remote process. Very helpful for the offensive side, giving them a good way to hide their processes without needing a kernel rootkit. But what about the defensive side? Today I release a threat detection module for detecting Saruman thread injection. This threat detection engine was designed as a Shiva module in less than one day, and is a great example of how Linux threat detection and exploit mitigation monitors can be rapidly designed and installed with Shiva.
13
27
1,378
sergey bratus retweeted
Let me tell you how I delayed WinXP SP2 for a month. My software (BlackICE) was on the list of software that had to work. When they made major changes to the kernel network stack, my software broke. They grabbed their reverse engineers to figure out why. What they discovered was that my software doing something evil, patching the kernel's network stack when our software was loaded. That's tricky on a multi-CPU system with warring instruction/data caches. We wrote a patent on how to do it reliably without crashing the system. We searched through the kernel to find the location we needed to patch, looking for a certain pattern of bytes. They changed the network stack so that thing we were patching no longer existed. So to make our software work, the inserted that pattern back into the kernel. As packets arrived, the new function would jump to that pattern, and then after, jump right back. This way, we could find the pattern and patch it -- and thereby patch the intended function. Some Microsoft lawyers wanted to sue us for violating the software license agreement, which forbids reverse engineering, which we had to do in order to patch the kernel at runtime. Cooler heads prevailed. The point is our software did an ugly hack in order to work, and then Microsoft did an even crazier, uglier hack so that we'd keep working. For years after, when meeting Microsoft engineers at conferences, they'd love to yell at me. When Vista came along, they added signing of kernel models, putting an end to such nonsense, but also providing a real documented API we could use.
Microsoft once discovered SimCity was crashing on Windows 95 because SimCity had a memory bug. Instead of saying “not our problem,” Microsoft added a compatibility workaround just for SimCity. Because users don’t care whose bug it is. They care that software that worked yesterday still works today. Backwards compatibility is a feature.
17
58
2
761
62,538
sergey bratus retweeted
Today was the last class on assembly, and we had a competition! Students submitted assembly code to drive their Tron bot every tick. Both 1st and 2nd abused a teleportation bug to dominate the board. Very creative solutions!
1
3
32
1,630
sergey bratus retweeted
Happy to see our paper "Mind the Heap: Preventing Capability Leakage Across CHERI Compartments" accepted at @acm_ccs 2026. I'll be in The Hague in November to support the amazing @s_hamedgh keeping the heap exploitation spirit alive on CHERI hardware. sigsac.org/ccs/CCS2026/progr…
1
5
30
1,562
sergey bratus retweeted
A Brief History of the IPv4 Address Space, via @Insinuator insinuator.net/2019/08/a-bri…
1
6
15
1,155
sergey bratus retweeted
"Petabytes of logs?" asked the 2015-era Facebook/Google/Amazon detection engineer, wearing a faded Skrillex tour shirt under a corporate Patagonia vest. "Let me finish my cigarette."
AI safety people discovering that a system can emit petabytes of logs: “this is an unprecedented observability problem. we may need fleets of agents to reason over all this data.” old infra guys: brother, we were processing PB-scale telco CDRs, signaling traces and network logs on a Tuesday with Hadoop. dump it into HDFS. partition by day/site/whatever poor bastard needed the report. write some Hive that compiles into an offensively large MapReduce job. let YARN distribute the suffering. wait for the shuffle. discover one reducer has 40% of the keys. swear at data skew. fix it. run it again. if a node dies, Hadoop runs the task somewhere else. if twelve nodes die, Hadoop gets more enthusiastic about it. our “agentic observability platform” was Grafana, grep, awk, a shell script written in 2012, and one senior engineer staring at reducer 317 stuck at 99% saying “that’s not fucking normal.” PB of logs is not scary. we had standards.
24
79
5
1,380
132,395
sergey bratus retweeted
Today I'm joining Anthropic to lead the cybersecurity mission of the Frontier Red Team. In my career I've never seen a clearer opportunity to build a more secure world for everyone. For 40 years we've lived with fundamentally insecure technology. What will it take to make the past 40 years of hacking a historical oddity? That's what I'm here to find out. Super excited to work with @logangraham and the rest of the FRT crew.
112
55
13
1,417
160,617
The ad hoc network protocol tricks described in swarmtraces.org/ are exactly the skills we teach undergraduate students in basic networks classes. Simple to learn and yet satisfying, these skills are in a perfect teaching sweet spot.
1
12
973
sergey bratus retweeted
Jobs, Jobs, Jobs! Thomas Bourgeat (too classy for X), @cpitclaudel and I are hiring a postdoc and software engineer to work on building a verified LLM inference stack at @ICepfl, in collaboration with @afd_icl, @wicko3, and @MariosKogias at @ICComputing. Links in 🧵.
4
11
46
3,284
One of my pet peeves is how DTrace, a true work of art and a godsend for teaching system visibility, got degraded in MacOS over the years. I used it to set the baseline expectation that one's OS should be knowable and transparent. Now, alas, most of my scripts no longer work.
1
6
36
3,385
sergey bratus retweeted
Verification is IN! But no one has formal semantics. Can LLMs build ones we can trust? Yes and here's the crazy part: ship your interpreter. Compile it to bare metal RISC-V, agent proves the raw assembly refines the semantics. github.com/BasisResearch/shi…
6
10
3
145
11,048
sergey bratus retweeted
I am running a formal methods hackathon on November 1st, with a bunch of my friends. Contestants will compete to build normie software -- video games, AI agents, travel booking tools, etc. -- but formally verified. We are going to measure to what degree these tools are usable by SWEs with no prior FM background and no FM-specific education. This is a super exciting opportunity to see where the ergonomic gaps are that we, the FM community, need to fill in order to take advantage of our moment in the zeitgeist. If you want to get involved, please DM me! In particular, I think I've got location/food/tokens/photography all covered, but I need some sponsors for the prizes. If you make a cool gizmo or product we can give away and you're down to donate one, please do so!
20
29
7
255
19,746
I wonder if the original scare of hacking, propelled by myths like "whistling into a phone could launch nuclear missiles," is behind today's "AI hacking" panic. Unfamiliar behavior by devices presumed mundane is indeed unsettling, but we know panic and bans are bad responses.
8
17
1,263
sergey bratus retweeted
My pet rabbit chewed through the untreated wooden bar at the bottom of the cage and escaped. He's already superhuman at gnawing through wood, I strongly suspect that even a steel box can't contain him.
19
6
1
129
11,070