Goodbye to a cool XS-leak! 👋

I have written a blog post about null pointers on Linux: disconnect3d.pl/2025/03/03/whe…

🎲DiceGang + ⛳️Psi Beta Rho 🥳

This year's LA CTF (hosted by Psi Beta Rho) got featured by UCLA Samueli Engineering! 👀 Really awesome to look back and see how much it has grown! 🥳⛳️ samueli.ucla.edu/ucla-hosts-hyb…

Blink: Intent to Deprecate and Remove: Remove auto-detection of ISO-2022-JP charset in HTML bit.ly/3FUL2Je

🤯

Got #1 at b01lers CTF with Psi Beta Rho this past weekend! 🏆⛳️ This is the first time our team has gotten first (we've been close a couple of times 🫠) so was really excited about this result! 🥳 Thanks to b01lers for the cool challenges! ❤️

Psi Beta Rho won b01lers CTF 2025 this weekend! 🎉🥳 Thank you to the b01lers team for hosting, and all our members for participating❣️

Today I used a technique that’s probably not widely known in the community. In what cases could code like this lead to a vulnerability? ->

bugzilla.mozilla.org/show_bug.cgi?i… This is a big change for DOM Clobberers. Firefox Nightly no longer allows native document properties to be overwritten by elements with a name attr, e.g.: <img src=a name=currentScript> <script> alert(document.currentScript)// HTMLScriptElement </script>

Had a lot of fun at the first day of DiceCTF Finals playing with folks from Psi Beta Rho! ⛳️ Thanks to DiceGang for being great hosts and the neat challenges! 🥳

Day 2 was equally fun! 👀 All of the novelty challenges were really interesting and blew my mind. 🤯 Wish we had more time to play around with them, it was a blast! ❤️

I recently talked to some students about scaling vulnerability discovery (particularly in the context of developing program analysis tools). 🐛🚀 The following diagram is how I decided to break down the process. 🖌️ What did I get right/miss? 👀

Carey Nachenberg was a Chief Scientist at a GoogleX moonshot, a Fellow (senior most eng at Symantec) and a professor at UCLA. I interviewed him about his career story and we discussed: • Story behind his growth to IC10 (VP equivalent) • How high-level IC recruiting works •