Join us in Taiwan for a meaningful gathering of ideas and research in understanding programs. CFP is open until June 27th.

Super fun to talk with John Hammond and my teammates lukas Fabio about our system ARTIPHISHELL, the AI Cyber Challenge (AIxCC), and LLMs! youtu.be/TQFDqsgPKdY?si…

What does it mean to be a hacker? This semester, I taught a hacker history and culture class, which was a blast. In one assignment, my students paid tribute to the classic Phrack Zine Pro-Phile -- a small bio on a famous hacker. Check out their pieces: cse194.mahaloz.re/prophiles.html

Ready to make your impact on the software understanding and reverse engineering community? Submit your work to SURE! Our submission site is now open: sure25.hotcrp.com. The submission deadline is June 28th AoE. We look forward to seeing your novel work 🔥.

🔎🛠️ Calling all reverse engineers & code explorers! Bring the research that cracks open the secrets of programs to #SURE25. CFP closes in 3 weeks—submit now and help shape the future of Software Understanding & Reverse Engineering. sure-workshop.org

Only **10** days left to submit to SURE ⏰. Go go go!

As is workshop tradition, we will be extending the deadline for our CFP until July 7th (hard deadline). We're excited to see the work you all have cooking 🧑‍🍳🔥

Had a blast speaking on the “beyond decompilation” panel hosted by sergey bratus at Recon. If you’re around, hmu, I’d love to chat more about decompilation and our impeding AI doom :).

⏰ Only 7 days left — CFP closes soon! Submit your awesome work to SURE and contribute to furthering software understanding! 🔗 sure-workshop.org

Can we statistically estimate how likely an LLM-generated program is correct w/o knowing what is a correct program for that task? Sounds impossible-but it's actually really simple. In fact our oracle-less eval can reliably substitute a pass@1 based eval. arxiv.org/abs/2507.00057

Almost out of time to submit! We're looking for all cutting-edge research in the area of reversing and understanding software. Join us in changing the status quo of understanding programs.

Less than 24 hours to go! Get those submissions in 💻🔥⏩ sure25.hotcrp.com

🚨We're back 🚨 In this episode Adam Doupé and [email protected] talk with Shellphish 's Wil Gibbs and lukas about the DARPA / ARPA-H AIxCC finals and their submission of ARTIPHISHELL.

Fantastic job by my student Zao Yang presenting his decompiler fuzzing work Bin2Wrong at USENIX Association ATC! 🔥 Paper: futures.cs.utah.edu/papers/25ATC.p… Slides: futures.cs.utah.edu/papers/25ATC_s… Code: github.com/FuturesLab/Bin… Impact of Bin2Wrong-found bugs (Vector 35): binary.ninja/2024/06/19/res…

decompilers still feel arcane to me. even super popular open source ones like ghidra have a plentitude of critical bugs in their issue trackers open for months. identifying semantic decompilation errors at scale is challenging, so it's neat to see bin2wrong addressing this

pwn.college is an education platform for students (and other interested parties) to learn about, and practice, core cybersecurity concepts in a hands-on fashion. pwn.college