[email protected]

Retired @DEFCON CTF org, @Shellphish Captain Emeritus, @ASU Prof, @angrdothorse hacker, @pwncollege sensei, @ACE_Inst Director.

[kylebot @ky1ebot]

Phew. Shellphish qualified for DEF CON final even in the era of slop. Didn't even expected that!
Let's go, Shellphishers!

[[email protected] @Zardus]

We're really living in a renaissance of decompilation! Super excited about this work.

[Zion Leonahenahe Basque @mahal0z]

For years, Rust binaries made reversing a nightmare. Modern decompilers only support C, lacking meaningful types, constructs, and language-specific functions. Led by @34r7hm4n, we're releasing our S&P work Oxidizer, the first deep Rust decompiler, built on angr!

Interested? 🧵👇

[[email protected] @Zardus]

@elfexecutieble About 15 years! Got my first paper rejection in 2011 :-)

[[email protected] @Zardus]

As of yesterday's Usenix Security notifications, I have received a cumulative 199 paper rejections in my research career! One more to 200! 🤞🤞🤞🤞🤞

[[email protected] @Zardus]

@trq212 I’ve been generating API-compatible drop-in rust rewrites of load-bearing C libraries here: https://t.co/Z9myYbJiBA

It’s a crazy world! With enough test cases (which can be AI augmented), so much is possible.

[[email protected] @Zardus]

@synsec_ai For those that don't recall, SynSec is an experiment on agentically-executed scientific research in all areas of cybersecurity. All papers must have an AI model as first author, though we *do* have a human-first-author track too. Go prompt some science!

https://t.co/uvE3Fp12L7

[[email protected] @Zardus]

Reminder! Today is the submission deadline for the first ever Conference of Synthetic Security Research @synsec_ai, so unless you want to gamble on a(nother) extension, warm up those agents and get those papers submitted!

[[email protected] @Zardus]

@alex_weibel Oops! Fixed, sorry about that!

[[email protected] @Zardus]

Can we translate all C to Rust? The susceptibility of C to memory corruption has long been a cybersecurity pain point, and coding agents can free us of it. Read on for my recent experiments in this space, and apt & docker repos that you can pull rust-converted libraries from!

[[email protected] @Zardus]

@JasonSeibel @ASU Super cool! Love the graph. The infinite codex experiment was indeed amazing, now I'm in the same boat of finite tokens :'-)

[[email protected] @Zardus]

@jeremie_strand This is definitely an area I plan to analyze more deeply for the eventual paper! For now, the edge semantics are checked using testcases (except for simpler things like verifying that all symbols are present), but that's obviously pretty imperfect!

[[email protected] @Zardus]

@ivanrouzanov Yeah, this is super tricky. Right now, the best route we have is "the applications using these libraries still work", but of course that's still a subpar solution!

[[email protected] @Zardus]

@XenoKovah Yep, it was a tongue-in-cheek answer. Of course, any memory-safe language could work just the same (given the same FFI support, I guess).

[[email protected] @Zardus]

@ASU @Anthropic @OpenAI @GoogleAI @DARPA This concludes what may be the longest tweet thread I've ever written. Interested to hear your thoughts!

https://t.co/Z9myYbIKM2
https://t.co/w0CofDNSe8
https://t.co/blvlknmE16
https://t.co/WHVpHxPDGV

If you want to chat in person, I’m at @DEFCON Singapore at @DEFCONAcademy!

[[email protected] @Zardus]

@ASU @Anthropic @OpenAI @GoogleAI Finally, credit where credit is due: @DARPA's TRACTOR program (https://t.co/8b61Z9JS9K) was first to suggest we Translate All C TO Rust. It's been on my mind since its announcement, and it wouldn't have occurred to me do this otherwise! As usual, DARPA is leading the way here!