Associate professor @sbucompsc | research on network and system security, network monitoring and measurement, online privacy | @mikepo@infosec.exchange

NYC
Joined January 2009
We (cc @blueminimal) are soliciting web security students & postdocs for junior PC members for #SecWeb '24 (co-located with IEEE S&P). We have a mentoring program in place to help guide the junior PC members. If interested, please fill out the form: forms.gle/AAxS1DRvfEGJ1LnN6
7
1
13
3,527
One of my favorite ways to detect if you're in a sandbox Custom dictionary sizes in VMs are always tiny.
17
130
5
1,591
285,370
We are just days away from the RAID conference on October 16-18! We have an amazing program with a lot of great papers. Curious? Check out the program here: raid2023.org/program.html
4
1
6
2,658
Web Security vs. Binary Exploitation
95
1,866
203
10,009
835,803
Χωρίς αυτούς τους ανθρώπους δε θα μπορούσαμε να πάμε στη Θεσσαλία. Ευχαριστούμε και τους 25 απίθανους ανθρώπους που προσφέρθηκαν εθελοντικά να κάνουν τζι-τζι τους πάνω από 1100100 φορητούς υπολογιστές! Για περισσότερες από 6 ώρες έδωσαν τον καλύτερο τους εαυτό! Επίσης, μαζί μας
1
23
5
87
5,387
If you are a strong programmer, security-minded, and love operating systems, I'm looking for PhD students and interns to join me at @IMDEA_Software to work on Systems and Security related projects . More info at portokalidis.net/openings.ht…
19
37
6,852
CfP for @DIMVAConf #DIMVA24 is live. Submissions Dec06 and Feb14: dimva.org/dimva2024/ Join us Jul17 to Jul19 in Lausanne! cc @gannimo
8
2
9
6,177
Encrypted Client Hello (ECH) is a great improvement for online privacy. However, it’s important to stress that this ISN'T the last puzzle piece to privacy as stated by the article's title. ECH safeguards plaintext domain names (previously exposed via the SNI field in TLS handshake) from passive eavesdropping, but the IP address is still there, potentially carrying a lot of information about the website visited. This is especially true for many websites that are single-hosted (i.e., having a 1-to-1 domain-IP mapping with the hosting address). More details are from these research papers: AsiaCCS '20: arxiv.org/pdf/1911.00563.pdf PoPETS '21: arxiv.org/pdf/2102.08332.pdf
1
29
1
122
25,245
Introducing the ai-cli library, a command-line copilot. It attaches to programs that offer interactive command-line editing and modifies their interface so you can obtain generative AI suggestions with a single keystroke. https:/www.spinellis.gr/l/ai-cli-lib?tw230914
7
41
2
191
18,804
michalis retweeted
No, these aren't screenshots of Apple's website. These are 1970s @LEGO_Group booklets that I've collected. They were doing bento box layouts set in a bold sans-serif 50 years ago.
9
56
2
577
42,792
Exciting news! #FOCI2023, the Workshop on Free and Open Communications on the Internet, is happening in person alongside the @PET_Symposium this year! Join us for cutting-edge discussions on censorship, circumvention and more. To register, 👉FOCI.community
6
25
3,014
Before going to the beach and having your laptop off for a few weeks (I wish...), consider submitting your latest work at ISC this summer! The conference will be held in the Netherlands and we have keynotes from the best -- we will reveal, soon. :)
ISC Conference 2024@isc_conf8 Jul 2023
Less than 3 weeks to the submission deadline (July 27, 2023, AoE) for ISC'23. #cfp #informationsecurity #conference #submissions #DEADLINE . Please RT! More info about the conference: isc23.cs.rug.nl/ @elathan.
5
7
874
Joint statement from more than 300 scientists from 32 countries warning against the EU proposal for regulation to detect Child Sexual Abuse Material tinyurl.com/CSAScientistsLet…… The technologies it puts forward are inadequate to solve the problem and bring huge societal risks 🧵
6
222
38
342
183,738
Check out this almost unbelievable time-lapse of wildfire smoke consuming the World Trade Center and the New York City skyline. Those vulnerable to poor air quality, including seniors and young children, should limit time outdoors if possible. More: AirNow.gov
671
10,305
2,286
26,145
9,244,771
Blizzard got their New York Marketing game down to a science. Diablo - Welcome to Hell
14
62
4
323
55,756
Ο καθηγητής του Τμήματος Βαγγέλης Μαρκάτος τιμάται με το βραβείο Εξαίρετης Πανεπιστημιακής Διδασκαλίας "Στέλιος Πηχωρίδης" του Πανεπιστημίου Κρήτης. uoc.gr/announce/pichoridi.ht…
2
6
341
New waves (still ongoing) of Sybil attacks against the @GetI2P networks within 3 months of the last one. This time, the scale is larger. Yesterday, I2P Metrics noticed >365K routers in the network. Most adversarial nodes act as "floodfill" with bandwidth capacity >2MBps on the first day. Then they switch to various bandwidth-capacity flags, perhaps to make blocking them more challenging. These attacks heavily impact users running i2pd clients (mostly in 🇷🇺). Users with i2p-Java client are less impacted and some can still connect to the network thanks to countermeasures implemented in recent releases. It's very worrisome since the attacker(s) with the capability to initiate such a large-scale and distributed attack with some adversarial routers located in unusual Autonomous Systems and Countries.
2
3
891
michalis retweeted
ACNS'24 will be earlier than usual, with comfortable weather in Abu Dhabi. The 1st submission deadline is 3 months away. #cybersecurity, #acns, #cfp, #abudhabi
5
1
6
3,150
Who needs a blue check when you have a BLUE WHALE?
586
8,260
744
99,382
6,373,042
incredible circular storytelling: - printer manufacturers sell expensive cartridges - people learn to refill them - manufacturers put one-time-use security chips in the cartridges - refillers invent chip resetters - ... - REFILLERS INVENT CHIP RESETTERS WITH A LIMITED-USE CHIP
38
852
78
6,315
508,158