“Is it possible to trust trust?” Associate Editor in Chief Laurie Williams intros this edition of Security & Privacy with a piece on software supply chain security. computer.org/csdl/magazine/… IEEE Computer Society #IEEECS

NC State has multiple security-specific faculty positions in computer science this year! Come join Alexandros Kapravelos Laurie Williams Brad Reaves Alessandra Scafuro Anupam Das and me. Applications encouraged by Nov 15th. Contact me with questions. csc.ncsu.edu/employment/job…

This has been my “trick” too: I’m not always the smartest in the room, but I’m *real* good at what I’m good at. And then I’ve worked at it to be even better. 💪 This thread is worth a read 🧵

Was great to chat with Joe about software supply chain security.

Reflecting on why my teaching statement from 5 years ago was so bad. austinhenley.com/blog/futuretea…

An interesting thread 👀 Would love to explore it soon.

May be I will be in that hole 😐 I will know soon.

Couldn’t agree more.

I am laid off from Microsoft Research MTL. It hasn't quite sunk in, but it has hit my confidence to lose the job I started a little over a year ago after PhD. I loved the people around me. I would have liked to reflect more, but amidst the uncertainties, I need a new job. #opentowork

Hello students! We put together some tips from our mentors to help you prepare for ICSE trip! It's a living document. Ping me if you have something to share as well!🤗 We are SO EXCITED for the mentoring workshop and can't wait to welcome you soon!!🥳 conf.researchr.org/track/icse-202…

The PhD training is much beyond technical expertise. It's also about building the characters -- leadership (defining problems and building teams), grit, and mental toughness (and many more!) It has a lot in common with (thus benefit) entrepreneurship. I really enjoyed my PhD.

🚨 ALERT: The Lazarus Group (aka North Korea) is behind a sophisticated social engineering campaign targeting JavaScript developers. They're using compromised GitHub accounts and malware-laden NPM packages to achieve their malicious objectives. 👀 Click to read more

The `xz` package backdoor is just the tip of the iceberg. There's a CONSTANT low-level stream of malware and spyware being uploaded to npm, PyPI, and Go registries. I want to share a few examples from the 20,000+ malicious packages we detected so far:

This is what's happening in my Bangladesh. So far around 138 students have been killed. It has been 4 days i spoke with my parents and saw them. No internet! Complete blackout! #BangladeshBleeding #Hasinadictator

The Transformer's decoder clearly explained 👇🏻

📢 People that I know often send me their draft papers to get feedback. I enjoy doing this sort of informal peer review and would like to open it up to everyone. Details in the Q&A below. What is informal peer review and why is it helpful? The *formal* peer review system serves