Collin Mulliner (@collinrm) header
Collin Mulliner (@collinrm) profile picture

security engineering

NYC metro area
Joined November 2007
Photo by Collin Mulliner (@collinrm)Photo by Collin Mulliner (@collinrm)Photo by Collin Mulliner (@collinrm)Photo by Collin Mulliner (@collinrm)Photo by Collin Mulliner (@collinrm)Photo by Collin Mulliner (@collinrm)Photo by Collin Mulliner (@collinrm)Photo by Collin Mulliner (@collinrm)Photo by Collin Mulliner (@collinrm)Photo by Collin Mulliner (@collinrm)
FluxN0de a platform to prototype and explore LoRa and #LoRaWAN applications on #ESP32 based boards. The platform provides a JavaScript runtime with easy access to the LoRa radio. This was my side project in the last year. mulliner.org/blog/blosxom.cg… GH: github.com/crmulliner/fluxno…
2
21
3
57
Nice to see people still care about SMS security. I guess you loose your naming rights after 15 years. usenix.org/legacy/event/sec1… @iamnion
1
9
719
Collin Mulliner retweeted
Periodic re-up of @rossjanderson (RIP)'s definition of "security engineering" "Security engineering is about building systems to remain dependable in the face of malice, error, or mischance. As a discipline, it focuses on the tools, processes, and methods needed to design, implement, and test complete systems, and to adapt existing systems as their environment evolves." cl.cam.ac.uk/archive/rja14/P…
13
58
2,563
Collin Mulliner retweeted
lol shout out to daily dave
Some of ya all weren't around for "No More Free Bugs", and it shows. seclists.org/dailydave/2009/… ~20 years ago @0xcharlie spitting game on the topic. 😅
5
14
66
5,685
Back in London for the first time in 10 years.
5
375
This
Replying to @msuiche
Defenders (organizations, not software makers) should also be aggressively investing in their continuous deployment infrastructure for every layer of their stack as best they can. That's the foundation that needs to be built up ASAP to make the vuln find+patch tokens actionable.
320
Collin Mulliner retweeted
Can confirm. Vendors: I vow to never buy any product if *anyone* from your company has ever cold-called my personal cell phone.
Pre-blackhat reminder: DO NOT let vendors scan your badge. You do not need to win those AirPods in that raffle. They collect your phone number and will harass you every single day for the next 10 years.
2
6
1
31
3,506
Collin Mulliner retweeted
Excited to share one of the things I've been working on: Gemini 3.5 Flash Cyber: a lightweight, highly capable model built to help the security community find and patch vulnerabilities at scale. deepmind.google/blog/introdu…
39
18
2
125
9,314
Collin Mulliner retweeted
Aftermarket devices with connectivity are a bad idea for your car. 👎
4
17
5,405
Collin Mulliner retweeted
If your only regret from this weekend is not buying that hoodie, we've got good news. The Summercon merch store is still open for a limited time: summercon-swag-store.printfu…
2
4
560
Thank you @SummerC0n for another great year! Thanks to all who made it possible!
2
337
Collin Mulliner retweeted
Just checking – does anyone in the NYC area have either of these I can borrow for about a week (or buy if you prefer): - iBook G3 clamshell - iMac G3 Working, with Ethernet. You know. Like these:
5
2
26
2,978
Constant time programming is the primary defense against timing attacks, but the meaning of the term actually varies. On a key loading case study, Brumley finds BoringSSL's leak orders of magnitude stronger than OpenSSL's, despite, surprisingly, a stricter threat model.@riteslgci
4
8
643
If you have a better poster, we like to hear from you! Submit your poster by June 25th at usenix.org/conference/woot26…
4
6
984
Collin Mulliner retweeted
Everyone today is a hacker in a sense but there are very few OG hackers on which shoulders we stand Oh dude, Felix “FX” Lindner you were so much a hackers hacker and you will be missed RIP my friend and thank you
50
134
28
573
84,372
Collin Mulliner retweeted
Today I have a more serious topic than usual, please consider reposting for reach: My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/3]
3
112
2
71
37,527
Collin Mulliner retweeted
Don't miss the culmination of AIxCC at @defcon. Some of the best in the world have spent two years to leverage AI for next generation cybersecurity wins.
We’ll announce the results and winners of the DARPA AI Cyber Challenge (AIxCC) on Friday at DEF CON 33. For more on the challenge, the teams, and the AIxCC Experience at the event, visit: aicyberchallenge.com.
1
13
1
34
8,173
Thanks @SummerC0n staff for a great con!!
1
4
481
SummerC0n 2025 good to be back!
1
4
325