Pinned Tweet
FluxN0de a platform to prototype and explore LoRa and #LoRaWAN applications on #ESP32 based boards. The platform provides a JavaScript runtime with easy access to the LoRa radio. This was my side project in the last year. mulliner.org/blog/blosxom.cg… GH: github.com/crmulliner/fluxno…
Nice to see people still care about SMS security. I guess you loose your naming rights after 15 years. usenix.org/legacy/event/sec1… @iamnion
Collin Mulliner retweeted
Periodic re-up of @rossjanderson (RIP)'s definition of "security engineering"
"Security engineering is about building systems to remain dependable in the face of malice, error, or mischance. As a discipline, it focuses on the tools, processes, and methods needed to design, implement, and test complete systems, and to adapt existing systems as their environment evolves."
cl.cam.ac.uk/archive/rja14/P…
Collin Mulliner retweeted
lol shout out to daily dave
Some of ya all weren't around for "No More Free Bugs", and it shows. seclists.org/dailydave/2009/…
~20 years ago @0xcharlie spitting game on the topic. 😅
This
Replying to @msuiche
Defenders (organizations, not software makers) should also be aggressively investing in their continuous deployment infrastructure for every layer of their stack as best they can. That's the foundation that needs to be built up ASAP to make the vuln find+patch tokens actionable.
Collin Mulliner retweeted
Can confirm. Vendors: I vow to never buy any product if *anyone* from your company has ever cold-called my personal cell phone.
Excited to share one of the things I've been working on: Gemini 3.5 Flash Cyber: a lightweight, highly capable model built to help the security community find and patch vulnerabilities at scale. deepmind.google/blog/introdu…
Collin Mulliner retweeted
Aftermarket devices with connectivity are a bad idea for your car. 👎
A device inside millions of cars has a security flaw that lets hackers unlock, track, even paralyze vehicles.
There's a patch. The problem? Half of car owners who have the device installed didn't ask for it, and may not even know about it. Thread👇
wired.com/story/a-device-hid…
Collin Mulliner retweeted
If your only regret from this weekend is not buying that hoodie, we've got good news.
The Summercon merch store is still open for a limited time:
summercon-swag-store.printfu…
Thank you @SummerC0n for another great year! Thanks to all who made it possible!
Collin Mulliner retweeted
Just checking – does anyone in the NYC area have either of these I can borrow for about a week (or buy if you prefer):
- iBook G3 clamshell
- iMac G3
Working, with Ethernet. You know. Like these:
Collin Mulliner retweeted
Constant time programming is the primary defense against timing attacks, but the meaning of the term actually varies. On a key loading case study, Brumley finds BoringSSL's leak orders of magnitude stronger than OpenSSL's, despite, surprisingly, a stricter threat model.@riteslgci
Collin Mulliner retweeted
If you have a better poster, we like to hear from you! Submit your poster by June 25th at usenix.org/conference/woot26…
Collin Mulliner retweeted
Everyone today is a hacker in a sense but there are very few OG hackers on which shoulders we stand
Oh dude, Felix “FX” Lindner you were so much a hackers hacker and you will be missed
RIP my friend and thank you
Collin Mulliner retweeted
Today I have a more serious topic than usual, please consider reposting for reach:
My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/3]
Collin Mulliner retweeted
Don't miss the culmination of AIxCC at @defcon. Some of the best in the world have spent two years to leverage AI for next generation cybersecurity wins.
We’ll announce the results and winners of the
DARPA AI Cyber Challenge (AIxCC) on Friday at
DEF CON 33. For more on the challenge, the teams, and the AIxCC Experience at the event, visit: aicyberchallenge.com.


























