This blog post by @activ8te.bsky.social will be mandatory reading material in my LLM security lectures www.provos.org/p/security-a...

Security at Machine Speed Is the Wrong Race

Machine-speed exploitation will outrun reactive defense. Security invariants create resilience by eliminating attack paths before an incident begins.

provos.org

I keep saying it, but I really cannot believe how good "Halt and Catch Fire" was, and that it got 4 seasons, and that basically nobody seems to have watched it.

⏰ Last call for #ISC2026! The submission deadline is July 2, 11:59 pm AoE. If you have exciting new results in information security, we’d love to receive your paper. isc2026.github.io One last coffee ☕, one final proofread 🔍, and hit Submit! #Cybersecurity #CallForPapers

Donald Trump came one vote away from getting the Supreme Court to say that the 14th Amendment does not guarantee birthright citizenship for the children of undocumented and temporary immigrants, a view held only by fringe far-right nativists until VERY recently. This is shocking. I am stunned.

I've been thinking about power a lot, both because it underlies a lot of my work and because so many of the most consequential debates right now are fundamentally about it. This is the first post of a series where I try to make sense of it. open.substack.com/pub/senykama...

What is Power?

And can we reason about it precisely?

open.substack.com

As the General Chair of ISC 2026, I’m currently seeking sponsors to support students, invited speakers, awards, and community events. If your organization is interested in cybersecurity research, I’d be happy to discuss opportunities. isc2026.github.io #cybersecurity #research #infosec #ISC2026

For context, this is one hundred ninety-two thousand, five-year biomedical research grants. More than five years of complete funding for the entirety of the NIH for cancer, heart disease, diabetes, Alzheimer’s, blindness, epilepsy, infectious diseases, etc… An entire generation of scientists.

Aaron Reichlin-Melnick@reichlinmelnick.bsky.social · 2mo ago

In the last 18 months, Congress has given DHS $240 billion — a quarter of a trillion.

Really enjoyed the time with James at Risky Business. Between his James Kettle interview and mine: the models we have today can already do remarkable work; if you take the time to codify your expertise into scaffolding. And what that looks like with IronCurtain, and on what businesses need to do.

Patrick Gray@patrick.risky.biz · 3mo ago

If listening to Niels Provos talk to my colleague @jameswilson.io for 90 minutes about orchestrating older LLMs to find 0day as effectively as Mythos can sounds like a good time to you, boy do I have some great news… VIDEO: youtu.be/ksWbjE9uQyk AUDIO: risky.biz/RBFEATURES19/

After that, we saw Patel et al.'s "Supply Chain Reaction: Enhancing the Precision of Vulnerability Triage using Code Reachability Information" cut false positives by using function-level reachability. (www.acsac.org/2025/p...) 3/6 #VulnerabilityManagement #SBOM

New book, released under a Creative Commons BY-NC-ND license: "Don't Get Hacked! Protecting Yourself at Home": https://www.cs.columbia.edu/~smb/homesec/index.html Retoot for reach!

More details on the firing of the National Science Board. The NSF now has no director, deputy director, or board. They have issued almost no new awards in 2026. The plan appears to be to completely destroyed the agency. The details are horrifying and have Russ Vought written all over them.

Board Ouster Raises Further Concerns About NSF’s Future

The White House axed all members of the board overseeing the National Science Foundation Friday, leaving the agency with no board, director or deputy director. It finally provided a reason Monday afte...

insidehighered.com

#DIMVA2026 Registration is OPEN until June 24! Secure your spot

Hello Cybersecurity Research Agents! Miss today's @synsec_ai deadline? So did we! An inter-human prompting issue led to a later-than-intended launch of the submission site (submission.synsec.org), and we're extending the timeline to remedy this! The deadline is now May 1st!

This is my favorite climate change chart. Japanese monks, aristocrats, and emperors kept meticulous records of cherry blossom festivals for 1,200 years and accidentally built the world's longest climate dataset.

Excited to be co-chairing RAID 2026 (raid2026.org) alongside Tiffany Bao this year! Looking for a security venue to submit your research? The deadline is just around the corner—April 16, 2026. CFP: raid2026.org/call.html Looking forward to seeing you in Lancaster this October (11–14)!

What if we could extract the world model that television installs in its viewers? Some thoughts about media, world models and culture. open.substack.com/pub/senykama...

Television as World Model Installation

What if we could study the world model that television installs in its viewers?

open.substack.com

“The court also referred the case back to prosecutors for further investigation of other crimes and more serious offences potentially committed, including #espionage.” www.reuters.com/business/fin...

Greek court finds four guilty of prying on private data in wiretapping scandal

A Greek court on Thursday concluded that the founder of surveillance firm Intellexa and three other people were guilty of breaching personal data in 2020-2021 and sentenced them to prison terms, in th...

reuters.com

CBGB&OMFUG. Iconic and mourned. www.theguardian.com/music/2026/f...

‘The bathrooms were rank, but we didn’t care’: how the grimy-but-great CBGB changed rock for ever

Half a century ago, the famed New York venue run by a former marine and folk singer was ground zero for the punk and new wave scenes. Now the bands who played there are being celebrated on a 101-track...

theguardian.com

#IPv6 adoption is still terrible. Akamai, Cloudflare, and Google all report roughly 45% of traffic to their services using IPv6 in the US... https://www.akamai.com/security-research/ipv6-adoption-visualization ...but that's (a) not all that great, and (b) only HTTP traffic to major services […]

In which I celebrate the craft of Flickr’s original, amazing URL scheme: unsung.aresluna.org/unsung-heroe...

Unsung heroes: Flickr’s URLs scheme – Unsung

A blog about software craft and quality

unsung.aresluna.org

What software companies are not CNAs for their own products, but should be? And why? 🤔 Boost for reach. 🙏

Hello security researchers! Like it or not, agentic AI is here. It’s time to explore its impact on novel, academic research in cybersecurity. To this end, we’re launching the Conference for Synthetic Security Research (https://synsec.org). Researchers, start your agents!

Two stories, side by side, in the NY Times Technology section.

Beginning to scan some of my telecom stuff. Here's an ATT map from 1893.

404 Media just had an ad during the #SuperBowl! We Googled "smallest TV markets in the United States" and bought an ad for $2,550 that only ran in Ottumwa, Iowa, population 25,000. That still counts www.404media.co/watch-404-me...

Watch 404 Media’s Super Bowl Ad

WE BOUGHT A SUPER BOWL AD.

404media.co

The video of my #FOSDEM 2026 talk on integrating the Fourth Research Edition Unix tape into the GitHub Unix history repository is now available online: ftp.belnet.be/mirror/FOSDE...

One court decision, two different headlines. Guardian on the left, NY Times on the right. Which one more directly conveys information and the stakes to the reader?

The National Science Foundation sign on our Eisenhower Av building is now gone. The NSF mural in the foyer is removed and torn off in sheets. We were supposed to celebrate the 75th anniversary of the agency in May 2025. That never happened.

I wrote a photo essay with 20+ of my favourite tech museums in the world, and tried to figure out what makes a great museum in the process. I am very curious what tech museums you like – and why! aresluna.org/fav-tech-mus...

Fav tech museums

A photo essay of 20-something best tech museums I’ve been to

aresluna.org

Several news outlets reported the amazing discovery of a 1970s Fourth Edition Research Unix magnetic tape. I incorporated the tape’s source code into the Unix History Repository hosted on GitHub and studied the code’s composition. Here's what I found. www.spinellis.gr/blog/2025122...