Pinned Tweet
FluxN0de a platform to prototype and explore LoRa and #LoRaWAN applications on #ESP32 based boards. The platform provides a JavaScript runtime with easy access to the LoRa radio. This was my side project in the last year. mulliner.org/blog/blosxom.cg… GH: github.com/crmulliner/fluxno…
This
Replying to @msuiche
Defenders (organizations, not software makers) should also be aggressively investing in their continuous deployment infrastructure for every layer of their stack as best they can. That's the foundation that needs to be built up ASAP to make the vuln find+patch tokens actionable.
Collin Mulliner retweeted
Can confirm. Vendors: I vow to never buy any product if *anyone* from your company has ever cold-called my personal cell phone.
Excited to share one of the things I've been working on: Gemini 3.5 Flash Cyber: a lightweight, highly capable model built to help the security community find and patch vulnerabilities at scale. deepmind.google/blog/introdu…
Collin Mulliner retweeted
Aftermarket devices with connectivity are a bad idea for your car. 👎
A device inside millions of cars has a security flaw that lets hackers unlock, track, even paralyze vehicles.
There's a patch. The problem? Half of car owners who have the device installed didn't ask for it, and may not even know about it. Thread👇
wired.com/story/a-device-hid…
Collin Mulliner retweeted
If your only regret from this weekend is not buying that hoodie, we've got good news.
The Summercon merch store is still open for a limited time:
summercon-swag-store.printfu…
Thank you @SummerC0n for another great year! Thanks to all who made it possible!
Collin Mulliner retweeted
Just checking – does anyone in the NYC area have either of these I can borrow for about a week (or buy if you prefer):
- iBook G3 clamshell
- iMac G3
Working, with Ethernet. You know. Like these:
Collin Mulliner retweeted
Constant time programming is the primary defense against timing attacks, but the meaning of the term actually varies. On a key loading case study, Brumley finds BoringSSL's leak orders of magnitude stronger than OpenSSL's, despite, surprisingly, a stricter threat model.@riteslgci
Collin Mulliner retweeted
If you have a better poster, we like to hear from you! Submit your poster by June 25th at usenix.org/conference/woot26…
Collin Mulliner retweeted
Everyone today is a hacker in a sense but there are very few OG hackers on which shoulders we stand
Oh dude, Felix “FX” Lindner you were so much a hackers hacker and you will be missed
RIP my friend and thank you
Collin Mulliner retweeted
Today I have a more serious topic than usual, please consider reposting for reach:
My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/3]
Collin Mulliner retweeted
Don't miss the culmination of AIxCC at @defcon. Some of the best in the world have spent two years to leverage AI for next generation cybersecurity wins.
We’ll announce the results and winners of the
DARPA AI Cyber Challenge (AIxCC) on Friday at
DEF CON 33. For more on the challenge, the teams, and the AIxCC Experience at the event, visit: aicyberchallenge.com.
Collin Mulliner retweeted
Gazing across the throngs at this month’s NYSEC, all we can think is: can’t wait to see you all again in July.
Summercon 2025
July 11–12 @ Littlefield, Brooklyn
Tickets: eventbrite.com/e/summercon-2…
Collin Mulliner retweeted
Summercon 2025 Call for Papers
Since 1987, Summercon has been where serious security research meets irreverent hacker culture.
We're looking for original, technically rigorous presentations that challenge assumptions and advance the state of the art.
CFP: summercon.org/cfp/
Collin Mulliner retweeted
The submission deadline for the 11th LangSec IEEE Security & Privacy workshop langsec.org/spw25/ is extended to January 31, 2025. Please send us your papers, research reports, posters or panel proposals! #langsec
Collin Mulliner retweeted
Just unrestricted an issue that shows a fun new attack surface. Android RCS locally transcribes incoming media, making vulnerabilities audio codecs now fully-remote. This bug in an obscure Samsung S24 codec is 0-click
project-zero.issues.chromium…
























