I am not very active here, find me on Mastodon: infosec.exchange/@cxiao Longer post char limits and more actual infosec practitioners there. If you think "you naive fools just need to UNDERSTAND AI's capabilities to see how great it is!": It is unlikely we will get along unless I already know you.

Cindʎ Xiao 🍉 (@cxiao@infosec.exchange)

3.99K Posts, 2.31K Following · professional strings(1) operator rust reverse engineering training -> @decoderloop personal account, personal views 🏳️‍🌈😎 only online on certain days, all responses de...

infosec.exchange

man, shut the fuck up

Slides for my #RustConf 2026 talk are now up! A recording will be posted some time after the conference as well, I'll post it when it's up.

Decoder Loop@decoderloop.com · last wk.

The slides for @cxiao.net's talk at #RustConf 2026, "Reverse Engineering Rust Malware in 2026", are now available! github.com/decoderloop/... The cover image is a painting of Minerva Terrace in Yellowstone National Park, by Thomas Moran, from 1872. #Rust #RustLang #Malware #Infosec #Reversing

I'm here at #RustConf! I have cool cards! Feel free to find me after my talk, message me here, or message me on the conference Discord (you can find me in my talk's channel `#reverse-engineering-rust-malware-in-2026`) if you want to get one of these!

Decoder Loop@decoderloop.com · last wk.

We've arrived in Montréal for #RustConf! Come find us around the conference for one of these trait table layout reference cards, for all your Rust reversing needs. The best time is right after @cxiao.net's talk "Reverse Engineering Rust Malware in 2026", at 2pm EDT on Wednesday!

Woo first copies are here! Our Hearts Burned For Home, on sale very soon October 12. The book unearths the untold story of Uyghur exiles who fled China’s expanding police state—only to become a pivotal force behind the fall of Bashar al-Assad’s regime. globalreports.columbia.edu/books/our-he...

If you'll be attending #RustConf in Montreal, and are interested in Rust malware, come find me and say hi! You can also watch the livestream and join the live Discord from home with a Virtual conference ticket, it's pay-what-you-want ⬇️ My talk will also be recorded and posted after!

Decoder Loop@decoderloop.com · 3w ago

We'll be at @rustconf.com in 2 weeks! Come join @cxiao.net for her talk, "Reverse Engineering Rust Malware in 2026", on Wednesday September 9! Can't make it to Montreal? You can still get a virtual, pay-what-you-want ticket! Register here: bit.ly/4wwduG6 #rustconf #rustconf26 #rustlang

I finally released this binja plugin! check it out for all your Rust reversing needs

Decoder Loop@decoderloop.com · 3w ago

🦀🥷 We've released a @binary.ninja plugin, Rust Metadata Carver, that extracts panic metadata from #Rust binaries: github.com/decoderloop/... Rust panic metadata reveals the libraries used, the version of Rust used, and code locations from the original Rust source, down to the line numbers!

🕯️

Hong Kong Free Press HKFP@hongkongfp.com · 4w ago

#HongKong Tiananmen vigil activists Chow Hang-tung and Lee Cheuk-yan have been convicted of incitement to subversion under a Beijing-imposed national security law. In full: buff.ly/nljNaot Photo: Todd Darling/HKFP.

The Rust-based backdoor observed in the supply chain compromise of the `arrayref` Rust crate has been added to the Rust Malware Sample Gallery: github.com/decoderloop/... #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #macOS #SupplyChain #arrayref

GitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.

A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery

github.com

AmnesiaStealer, an infostealer for macOS machines, has been added to the Rust Malware Sample Gallery: github.com/decoderloop/... #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #macOS #infostealer #AmnesiaStealer

GitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.

A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery

github.com

Still Toolkit has been added to the Rust Malware Sample Gallery: github.com/decoderloop/... Still Toolkit is notably used against Russian organizations. The dropper that delivers it is written using @tauri.app #rust #malware #infosec #ReverseEngineering #ArmoredLikho #EagleWerewolf #Tauri

GitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.

A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery

github.com

. @tressiemcphd.bsky.social has spoken about AI being a whole theory of politics meant to reinforce the power of the haves against the have-nots. i'll add that it is a theory centered on divide & conquer. if we are consuming content made by AI and endorse it, we starve other human beings

Combining bamboo with our brick-henges is a stroke of genius. Not necessarily from a practical or strategic sense, mind you. But look at this. Isn't it beautiful? There's joy and creativity (and maybe a dash of vandalism) in resistance. And also bricks. Lots of bricks.

Staying with Hong Kong, @niaocollective.bsky.social posted: An expanded blog post on Eye injuries caused by Hong Kong Polices deliberate use of so called "less-lethals" And a🧵on the 2019 observation of hungry ghost festival bsky.app/profile/niao... And a great thread on engineering with bamboo! 12/

An Eye For An Eye

CW: eye injuries, blood On 11 August 2019, HK police shot a street medic in the face. <div style="width: 500px; max-width: 100%; margin: 0 auto;"> ...

niaocollective.bearblog.dev

Niao Collective@niaocollective.bsky.social · last mo.

A few more examples of bamboo scaffolding used at the barricades in 2019-2020. These 'X' types were engineered with high precision...

AI anchors and AI-generated dramas are growing rapidly in China. But how far can a generative persona go before the illusion is broken? Meet Peach Fang. Check out our latest feature on CMP and LS!

虽然这些数字不准确但是threads真的在台湾很火，而在海外华人圈儿也有很多人用。bluesky这里基本上还是西方英语网站，随便搜一下也找不到很多关于台湾的国语新闻。我感觉蓝天上的西方人太把自己当成世界中心了，实际上蓝天还是一个很小的平台

Luke LeBrun@lukelebrun.ca · last mo.

According to Similarweb (the source cited for this data), ~27% of Threads' alleged half a billion monthly active users came from Taiwan (or ~135M people) Taiwan's actual population is ~23 million

oh HELL no why tf is this the default

Rami Ismail (رامي)@ramiismail.com · 2mo ago

oh my god my bluesky was set to show "English" only, fixed that immediately

We've just added these #RustLang #malware samples to the Rust Malware Sample Gallery: 1) JitterDropper 2) A Rust-based clipboard hijacker 3) #IronWorm, a Rust-based infostealer observed in several recent supply chain compromises 4) LabubaRAT github.com/decoderloop/... #infosec #reversing

GitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.

A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery

github.com

"The rungs of the professional and social ladder have been severed, destroying upward mobility … the national strategy to double incomes is predicated on building a vast middle class with steady incomes and predictable futures. But a food delivery rider can never count on that kind of stability."

If you missed the spring session of Deconstructing Rust Binaries: I'll be teaching it again this fall! October 26-31, fully virtual, all Rust RE (:

Decoder Loop@decoderloop.com · 2mo ago

We're BACK this fall at Ringzer0 with another round of Deconstructing Rust Binaries! October 26-31, 16 hours of virtual training on reversing Rust binaries. Struggling with Rust malware? This is the course for you. Early bird prices before July 31st! ringzer0.training/countermeasu...

Also explains a bit why Milk Tea Alliance was and kinda continues to be a thing. The struggles against the Thai state is related to the struggles against the junta in Myanmar is related to the struggles against the CCP in HK is related to the struggles against threats of Chinese invasion in Taiwan

Thailand also deported Uyghur asylum seekers who were rescued from a human-smuggling camp to China just last year, so this somehow does not surprise me

Hong Kong Free Press HKFP@hongkongfp.com · 2mo ago

Thailand reportedly blocks activist, wanted by Hong Kong nat. security police, from flying to Canada for resettlement 🔗 hongkongfp.com/2026/07/13/t...

什么是“中华灯塔派”？ 从曾经向往毛时代中国的西方左派，到今天被DeepSeek、高铁和中国城市景观震撼的网红与知识分子，他们都在用同一种方式想象中国：高效、稳定、有秩序，甚至是另一种现代化答案。 查建英说，现在看到的也许只是“一袭华丽的长袍”，而底下的虱子，迟早会浮上来。 欢迎收听、收看本期下午茶： youtu.be/3jzyYjwM5Nw

高铁、AI与中国世纪：中华灯塔派在向往什么？

YouTube video by 不明白播客

youtu.be

China Daily president and editor-in-chief Qu Yingpu said AI is evolving from a “cognitive tool” to an “action tool.” Read more on our CMP website or Substack: chinamediaproject.org/2026/07/09/t... linguasinica.substack.com/p/the-propag...

The Propaganda Promise of AI - China Media Project

Mandatory year-end accounting reports by Chinese state media treat "external propaganda" as a distinct, measurable pillar of their work. A recent policy piece by the top editor of China Daily lifts th...

chinamediaproject.org

37 years, we remember, and light the candle, for those who cannot. June 4 1989 memorials in #Canada this Thursday: #Toronto: 6pm, Chinese Consulate, 240 St. George St / 7pm, march to Tiananmen memorial plaque @ U of T (www.tadc.ca/37th-june4/) #CommemoratingTiananmenIsNotACrime #八九六四 #悼念无罪 #悼念無罪

37th Anniversary June 4th Memorial 「六四」37周年悼念 | Toronto Association for Democracy in China

https://www.tadc.ca/37th-june4/

tadc.ca

See you at RustConf! :D

RustConf@rustconf.com · 4mo ago

Speaker Spotlight: Cindy Xiao, Security Researcher @ DecoderLoop Rust malware is rising & reverse engineers are scrambling. On Sept 9, Cindy surveys the '26 landscape: techniques, tooling gaps, & how to teach RE in a Rust world. Schedule: sched.co/2KHt7 Register: bit.ly/4eUTQ1g #rustconf

I will be at @nsec.io tomorrow and Friday, if you're there too and would like to meet up let me know! :D #NorthSec #nsec

For example, it is totally unclear to me how China is exhibiting "geopolitical restraint" or is more credible/predictable about anything while its diplomats regularly & aggressively insist Taiwan belongs to them & 73-year old Xi Jinping is completely purging the military of any opposition.

Mark Copelovitch@mcopelov.bsky.social · 6mo ago

What is more predictable about China's security policy, exactly, in a world where 73-year old Xi Jinping is consolidating personalist control over the military?

Again, Xi/🇨🇳 may believe this, & we are stupidly trying to commit hegemonic suicide, but it's important to note that everything folks are rightly worried about in 🇺🇸 (aging personalist authoritarians, corruption, debt, repression, concentration camps, etc.) is far worse in 🇨🇳: bsky.app/profile/mcop...

James Fallows@jfallows.bsky.social · 4mo ago

This by Ryan Hass rings true to what I've seen/ heard/ learned about current PRC leaders' view of US. (TL;DR China has enormous problems, but the US is blowing itself up.) Can't imagine MAGA team has any inkling of this. (Cf: "Quick, easy victory over Iran.") www.theatlantic.com/internationa...

Very excited to present at RustConf this year! :D

RustConf@rustconf.com · 4mo ago

The growth of Rust has led to an increase in legit software targets to examine for vulnerabilities AND an explosion in malware written in Rust. @cxiao.net will be exploring this in “Reverse Engineering Rust Malware in 2026” @ #rustconf. View on schedule: sched.co/2KHt7 Register: bit.ly/4uB95Ru