security engineering

NYC metro area
Joined November 2007
FluxN0de a platform to prototype and explore LoRa and #LoRaWAN applications on #ESP32 based boards. The platform provides a JavaScript runtime with easy access to the LoRa radio. This was my side project in the last year. mulliner.org/blog/blosxom.cg… GH: github.com/crmulliner/fluxno…
2
21
3
57
Back in London for the first time in 10 years.
3
266
This
Replying to @msuiche
Defenders (organizations, not software makers) should also be aggressively investing in their continuous deployment infrastructure for every layer of their stack as best they can. That's the foundation that needs to be built up ASAP to make the vuln find+patch tokens actionable.
312
Collin Mulliner retweeted
Can confirm. Vendors: I vow to never buy any product if *anyone* from your company has ever cold-called my personal cell phone.
Pre-blackhat reminder: DO NOT let vendors scan your badge. You do not need to win those AirPods in that raffle. They collect your phone number and will harass you every single day for the next 10 years.
2
6
1
31
3,505
Collin Mulliner retweeted
Excited to share one of the things I've been working on: Gemini 3.5 Flash Cyber: a lightweight, highly capable model built to help the security community find and patch vulnerabilities at scale. deepmind.google/blog/introdu…
39
18
2
127
9,256
Collin Mulliner retweeted
Aftermarket devices with connectivity are a bad idea for your car. 👎
4
17
5,391
Collin Mulliner retweeted
If your only regret from this weekend is not buying that hoodie, we've got good news. The Summercon merch store is still open for a limited time: summercon-swag-store.printfu…
2
4
558
Thank you @SummerC0n for another great year! Thanks to all who made it possible!
2
333
Collin Mulliner retweeted
Just checking – does anyone in the NYC area have either of these I can borrow for about a week (or buy if you prefer): - iBook G3 clamshell - iMac G3 Working, with Ethernet. You know. Like these:
5
2
26
2,970
Constant time programming is the primary defense against timing attacks, but the meaning of the term actually varies. On a key loading case study, Brumley finds BoringSSL's leak orders of magnitude stronger than OpenSSL's, despite, surprisingly, a stricter threat model.@riteslgci
4
8
641
If you have a better poster, we like to hear from you! Submit your poster by June 25th at usenix.org/conference/woot26…
4
6
984
Collin Mulliner retweeted
Everyone today is a hacker in a sense but there are very few OG hackers on which shoulders we stand Oh dude, Felix “FX” Lindner you were so much a hackers hacker and you will be missed RIP my friend and thank you
50
134
28
570
84,330
Collin Mulliner retweeted
Today I have a more serious topic than usual, please consider reposting for reach: My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/3]
3
112
2
71
37,525
Collin Mulliner retweeted
Don't miss the culmination of AIxCC at @defcon. Some of the best in the world have spent two years to leverage AI for next generation cybersecurity wins.
We’ll announce the results and winners of the DARPA AI Cyber Challenge (AIxCC) on Friday at DEF CON 33. For more on the challenge, the teams, and the AIxCC Experience at the event, visit: aicyberchallenge.com.
1
13
1
34
8,163
Thanks @SummerC0n staff for a great con!!
1
4
477
SummerC0n 2025 good to be back!
1
4
323
Collin Mulliner retweeted
Gazing across the throngs at this month’s NYSEC, all we can think is: can’t wait to see you all again in July. Summercon 2025 July 11–12 @ Littlefield, Brooklyn Tickets: eventbrite.com/e/summercon-2…
3
12
2,663
Collin Mulliner retweeted
Summercon 2025 Call for Papers Since 1987, Summercon has been where serious security research meets irreverent hacker culture. We're looking for original, technically rigorous presentations that challenge assumptions and advance the state of the art. CFP: summercon.org/cfp/
1
15
21
5,307
Collin Mulliner retweeted
The submission deadline for the 11th LangSec IEEE Security & Privacy workshop langsec.org/spw25/ is extended to January 31, 2025. Please send us your papers, research reports, posters or panel proposals! #langsec
5
9
2,344
Just unrestricted an issue that shows a fun new attack surface. Android RCS locally transcribes incoming media, making vulnerabilities audio codecs now fully-remote. This bug in an obscure Samsung S24 codec is 0-click project-zero.issues.chromium…
3
103
10
299
50,560