Michael E. Locasto

Cybersecurity researcher analyzing why computer programs break and how we get better at fixing them.

[Michael E. Locasto @mlocasto]

Happy and grateful to pause and reflect on this 250th anniversary of the Declaration. No greater country exists. Centuries of sacrifice have given us a gift too precious to squander.

[Jocko Willink @jockowillink]

DISCIPLINE EQUALS FREEDOM.

[Michael E. Locasto @mlocasto]

Failed again.

[Michael E. Locasto @mlocasto]

@VivekGRamaswamy @elonmusk Get Rubio's Sunshine Protection Act https://t.co/ZOOFprkTVS back on the agenda and passed in both the Senate and the House. Stick with DST and drop the switch (never go back).

[Michael E. Locasto @mlocasto]

Glad to see this project getting kicked off. Narf will help adapt novel instrumentation and analysis techniques for malware on critical infrastructure devices https://t.co/KVave2CExE

[Michael E. Locasto @mlocasto]

@SteveGreenwald It must have been heartening ;) to hear that kind of assessment!

Posts like this risk coming across as a humble brag, but I mean it more as a signpost of hope; with the appropriate willpower, anything is possible. Our metabolic engines are burning crap -- just change the fuel.

[Michael E. Locasto @mlocasto]

#MAHA is something positive everyone can get behind. This is the impact of adopting a keto diet and refusing to eat the chemistry that passes for most foods peddled at us today.

[Michael E. Locasto @mlocasto]

@ENaderOfficial @BillSpadea @NJGOP His clear-eyed, data-driven assessment of actual risks and inept govt. actions during the pandemic demonstrate the courage and level-headed leadership NJ needs. He was right during the last crisis when everyone else was freaking out. He's likely to be right during the next.

[Michael E. Locasto @mlocasto]

Using 10M+ of taxpayer money to
1) hire more bureaucrats
2) spread anxiety inducing propaganda to children
No money to create reactors or educate physicists and engineers to design, build, and operate them. No measurable impact on temperature or carbon levels, the things they claim to care about.

[Michael E. Locasto @mlocasto]

Andrew wrote a blog post related to recent events around the IMPI tool from the point of view of the system that @NarfIndustries has been building to assess the cybersecurity of the software supply chain.
https://t.co/DDUIBZtS6m

[Michael E. Locasto @mlocasto]

The new engine reflects some of the novel research work creating format-aware tracing we conducted under the @DARPA SafeDocs program and partly reported on in our LangSec SPW paper this year https://t.co/xJwrmixQWC
by @parsingpunisher et al.

[PolySwarm 🇺🇸 @PolySwarm]

Two new engines have gone live in the Marketplace. A @NarfIndustries engine, Sir-Parse-A-Lot, that hunts down malicious PDF files. And @Seclookup, a URL engine that evaluates domains & URLs for potential threats & gauges their risk levels.

Learn more at: https://t.co/bvwDgpXg6y

[Michael E. Locasto @mlocasto]

A short, results-oriented post by @parsingpunisher and https://t.co/xaJVTDLbZ1 on their larger research aim of applying language-theoretic security principles to systematically analyze parsing differentials in Web servers and similar code.

[Narf Industries LLC @NarfIndustries]

The team at Narf found critical flaws in the Cesanta Mongoose HTTP Server. These vulnerabilities were reported to Cesanta promptly, and two of these vulnerabilities have been subsequently fixed. You can learn more about this work in our blog post: https://t.co/P56S4pYiDn

[Michael E. Locasto @mlocasto]

Q3 '22 through Q1 '23

[Michael E. Locasto @mlocasto]

@SteveGreenwald a transparent and naked appeal to authority by people who know better and don't care

[Michael E. Locasto @mlocasto]

@SteveGreenwald Now I have. "Hello, I wish to register a complaint."
https://t.co/s12ZC8LQh5 was about graceful retirement, not meta-resurrection.

[Christian Rossow (@[email protected]) @chrossow]

We've just opened the RAID'23 submission site: https://t.co/b5l0BJZ068. Looking forward to your submissions! 39 days left for writing and polishing.
See you all in Hong Kong.
Please RT.

[Narf Industries LLC @NarfIndustries]

Narf's own Dr. Michael Locasto (@mlocasto) is talking about secure host monitoring of ICS devices at 12:30pm tomorrow at #S4x23. Drop by and say hi!

[EchelonFront @EchelonFront]

STANDBY TO: GET SOME

It's back. The DISCIPLINE EQUALS FREEDOM RESET 002 begins January 1, 2023.

Sign up here.
https://t.co/nwOJaKcJt6

[DARPA @DARPA]

Weird machines may unintentionally help cyber attackers with their exploits, but researchers selected for our HARDEN program will seek to get to the root of the problem by depriving them of the chance in the first place. Learn more: https://t.co/A6x3MOCynv

[Michael E. Locasto @mlocasto]

For all the people in my contacts/network who live without sunshine behind a desk, this is worth trying. Been doing it for the last week and a half, and it is a tremendous boost. Tracking my progress on IG, not Twitter.

[EchelonFront @EchelonFront]

The DISCIPLINE EQUALS FREEDOM RESET starts TODAY

You’ve learned the habits, now track your progress over the next 30 days. #DEFReset

https://t.co/nwOJaKcJt6