Konrad Rieck ๐ retweeted
We're pleased to announce that #SaTML2027 will be in Reykjavik, Iceland! Thanks to General Chair Giovanni Apruzzese (@g_apru) for making the arrangements.
The conference itself will be in early May 2027. Get your submissions ready: the deadline will be September 29, 2026.
Konrad Rieck ๐ retweeted
Buried in yesterday's announcement of the location (Reykjavik, Iceland), we have also released Calls for:
- Papers (research, position, and SoK), deadline September 29, 2026
- Competitions
- Workshops, for the first time ever at SaTML!
Check out the wbsite for more info on all!
Konrad Rieck ๐ retweeted
today I had the pleasure of presenting our work on high-throughput type recovery for binaries at ACM CODASPY!
lots of great presentations and discussions all around.
slides: github.com/pr0me/xtride/blobโฆ
paper: arxiv.org/pdf/2603.08225
Konrad Rieck ๐ retweeted
we will present our work on practical binary type recovery at ACM CODASPY '26!
prior work rarely focused on applicability:
too slow, no meaningful filtering mechanisms, unsound struct recovery
we address these gaps and present a system for headless type recovery at scale
Konrad Rieck ๐ retweeted
If you ever dreamed of serving on the PC of one of the coolest cybersecurity conferences academia has to offer, now is your chance!
Nominate yourself (and your capable friends) to serve on the PC of @ACSAC_Conf 2026: forms.gle/SMbphtLggYcEGN696
Konrad Rieck ๐ retweeted
๐RELEASE: The TEAM-TESO cvs: thc.org/team-teso/
All exploits, advisories, teso-informationals (never released), burneye, bscan, ... plus some rare pictures.
Enjoy & Keep hacking.
Yours Sincerely,
Team-Teso (via THC's twitter account).
Konrad Rieck ๐ retweeted
Everyone today is a hacker in a sense but there are very few OG hackers on which shoulders we stand
Oh dude, Felix โFXโ Lindner you were so much a hackers hacker and you will be missed
RIP my friend and thank you
Konrad Rieck ๐ retweeted
Congratulations to the winners of #ACSAC2025's third test of time award: "Cujo: Efficient Detection and Prevention of Drive-By-Download Attacks" by Konrad Rieck, Tammo Krueger, and Andreas Dewald published in ACSAC 2010. ๐๐๐
Konrad Rieck ๐ retweeted
LLM-based Vulnerability Discovery - arxiv.org/pdf/2509.19117
Our investigation leads to a disappointing outcome: despite the impressive capabilities of language models in other domains, their performance in vulnerability discovery is not significantly different from that of a simple baseline. The substantial resources required to train these models, along with the considerable effort in curating high-quality training datasets, do not yield a substantial advantage over simple techniques developed decades ago.
Authors: @_thrsten, @mlsec. Felix Weiรberg, Lukas Pirch, Erik Imgrund, Jonas Mรถller at @TUBerlin @bifoldberlin
#AISecurity #LLMResearch #LineVul #PDBERT #UniXcoder #CodeGen25 #StarCoder2 #GPT35Turbo #GPT4o #Devign #ReVeal #RATS #Semgrep #SCM #CodeBERT #BigVul #CrossVul #CVEfixes #DiverseVul #SARD #CodeXGLUE
Konrad Rieck ๐ retweeted
Reminder: SaTML is a fantastic venue for research in trustworthy ML, whose deadline is in the next week. If your nice paper was rejected from #NeurIPS2025, consider sending it to SaTML for a thoughtful review process instead of rolling the dice again
Did AI folks not value your security insights or vice versa? Maybe youโre submitting your papers to the wrong conference.
@satml_conf has you covered! We are eager to read your work on the security, privacy, and fairness of AI.
๐ satml.org/call-for-papers
โฐ Deadline: Sep 24
Konrad Rieck ๐ retweeted

Rhys@RhysSullivan7 Aug 2025
United States
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
these gpt-5 numbers are insane ๐คฏ
Konrad Rieck ๐ retweeted
Some aspects of AI discourse seem to come from a different planet, oblivious to basic realities on Earth. AI for science is one such area. In this new essay, @sayashk and I argue that visions of accelerating science through AI should be considered unserious if they don't confront the production-progress paradox.
=========
AI leaders have predicted that it will enable dramatic scientific progress: curing cancer, doubling the human lifespan, colonizing space, and achieving a century of progress in the next decade. Given the cuts to federal funding for science in the U.S., the timing seems perfect, as AI could replace the need for a large scientific workforce.
Itโs a common-sense view, at least among technologists, that AI will speed science greatly as it gets adopted in every part of the scientific pipeline. But many early common-sense predictions about the impact of a new technology on an existing institution proved badly wrong. The Catholic Church welcomed the printing press as a way of solidifying its authority by printing Bibles. The early days of social media led to wide-eyed optimism about the spread of democracy worldwide following the Arab Spring.
Similarly, the impact of AI on science could be counterintuitive. Even if individual scientists benefit from adopting AI, it doesnโt mean science as a whole will benefit. When thinking about the macro effects, we are dealing with a complex system with emergent properties. That system behaves in surprising ways because it is not a market. It is better than markets at some things, like rewarding truth, but worse at others, such as reacting to technological shocks. So far, on balance, AI has been an unhealthy shock to science, stretching many of its processes to the breaking point.
Any serious attempt to forecast the impact of AI on science must confront the production-progress paradox. The rate of publication of scientific papers has been growing exponentially, increasing 500 fold between 1900 and 2015. But actual progress, by any available measure, has been constant or even slowing. So we must ask how AI is impacting, and will impact, the factors that have led to this disconnect.
Our analysis in this essay suggests that AI is likely to worsen the gap. This may not be true in all scientific fields, and it is certainly not a foregone conclusion. By carefully and urgently taking actions such as those we suggest, it may be possible to reverse course. Unfortunately, AI companies, science funders, and policy makers all seem oblivious to what the actual bottlenecks to scientific progress are. They are simply trying to accelerate production, which is like adding lanes to a highway when the slowdown is actually caused by a toll booth. Itโs sure to make things worse.
Contents
1. Science has been slowing โ the production-progress paradox
2. Why is progress slowing? Can AI help?
3. Science is not ready for software, let alone AI
4. AI might prolong the reliance on flawed theories
5. Human understanding remains essential
6. Implications for the future of science
7. Final thoughts
Full essay (about 6,500 words) aisnakeoil.com/p/could-ai-slโฆ
Konrad Rieck ๐ retweeted

Matthias Boehm@matthiasboehm717 Jul 2025
Germany
GermanyConnected via Germany Android AppAccount-level information, not a live location or per-post device.
Replying to @mlsec @bifoldberlin
Thanks for mentioning, it was @SBaunsgaard's contributions
Konrad Rieck ๐ retweeted
Deeply concerning to see scholars cut and paste chatGPT suggested citations into their papers without checking whether they actually exist. Back in my day we were taught the correct way: cut and paste citations from *other papers* without checking whether they actually exist.
Konrad Rieck ๐ retweeted
Can we statistically estimate how likely an LLM-generated program is correct w/o knowing what is a correct program for that task?
Sounds impossible-but it's actually really simple. In fact our oracle-less eval can reliably substitute a pass@1 based eval.
arxiv.org/abs/2507.00057
Konrad Rieck ๐ retweeted
The code for building and updating the ARVO dataset, a collection of over 5000 memory safety vulnerabilities in open source software, is now open source! Link in reply :)
Konrad Rieck ๐ retweeted
Fantastic venue. Everyone I chatted with was raving about @satml_conf 2025. Plus the current chairs @mlsec and Rachel Cummings are fantastic.
We're excited to announce the Call for Papers for SaTML 2026, the premier conference on secure and trustworthy machine learning @satml_conf
We seek papers on secure, private, and fair learning algorithms and systems.
๐ satml.org/call-for-papers/
โฐ Deadline: Sept 24
Konrad Rieck ๐ retweeted
I'm proud to announce that myself and @AtipriyaBajaj have created the Workshop on Software Understanding and Reverse Engineering (SURE), which will be co-located at CCS 2025. sure-workshop.org/
Please follow our workshop account @sureworkshop and RT it for visibility :).
Konrad Rieck ๐ retweeted
Our paper "Top Score on the Wrong Exam" paper will be presented at #ISSTA25 ๐ฃ in Trondheim!
๐mpi-softsec.github.io/papersโฆ
๐งโ๐ปgithub.com/niklasrisse/TopScโฆ
// @niklas2484 @fuzzjing.
































