I (finally) modernized my personal blog: tvcutsem.github.io This was done literally overnight with Claude's help over a cup of evening tea (Keemun Congou - fwiw) and morning coffee (long black). Joking aside: I am impressed - either saved me a full week of work or an expensive web designer bill

In the news today: the latest research from my PhD student Weihong Wang on exposing hidden privacy risks with the use of browser-extension crypto wallets. A great read if you're even remotely interested in #web3 #crypto and #privacy nieuws.kuleuven.be/en/content/2...

KU Leuven researchers expose hidden privacy risks in crypto wallets

crypto wallets Researchers from DistriNet, KU Leuven’s computer security research group, have uncovered hidden privacy risks in popular crypto wallets used as browser extensions. They analysed 85 wide...

nieuws.kuleuven.be

"AI was built in Python. But the code AI agents write will increasingly be TypeScript." That's the tagline of my latest post: tvcutsem.github.io/ai-python-ty...

Today I was doing some research on standalone Javascript runtimes. The OG in this space is of course node.js. The two contenders for the 'modern alternative' to node seem to be Deno and Bun.

IT Industry professional in Europe? Come to Leuven, Belgium this summer, join the SecAppDev course to plug your brain into everything application security, and you won't regret that you did. This year, a special focus on (how could it not be) AI security.

SecAppDev@secappdev.org · 5mo ago

SecAppDev 2026 is taking shape 🚀 We’ve just released the first program details, with initial speakers and workshops now live. Expect deep dives into application security, modern threats, and hands-on training. Full details on secappdev.org #appsec #infosec

Just published a short write-up of a fun experiment: I vibe-coded a Boids simulation with AI copilots in about 30 minutes. I built it for CS outreach, then documented what worked, what surprised me, and what I got wrong. tvcutsem.github.io/vibe-coding-...

A few days late, but still: happy 30th ann, JavaScript! Here's a good write-up of the origin story. In my uni class I always remind students of Crock's genius quote: JS is not Java, it's "a Lisp in C's clothing" arstechnica.com/gadgets/2025...

In 1995, a Netscape employee wrote a hack in 10 days that now runs the Internet

Thirty years later, JavaScript is the glue that holds the interactive web together, warts and all.

arstechnica.com

Glad to be in Ghent at the ICP meetup. Giving a talk on Self-sovereign Apps, and the research ongoing in my group on developing scalable Wasm-based smart contracts

I'm serving on the #ICBC 2026 PC, IEEE's flagship conference on Blockchain and cryptocurrency focused research. Consider submitting a paper if you’re working in this area. Full CFP at icbc2026.ieee-icbc.org

🔬 Research update: Depermissioning Web3’s Serving Layer Over the past few months, my PhD student Weihong Wang and I have been exploring challenges in Web3’s “serving layer” — the infrastructure responsible for making blockchain data accessible to decentralized applications (dapps).

Worth a read: Erik Meijer's latest piece in ACM Queue. He introduces a PL with an interesting mix of natural language instructions, logic variables and Excel-like formulas to let end-users generate readable and verifiable calculations. queue.acm.org/detail.cfm?i...

Steve Jobs once famously called computers "bicycles for the mind". The last few days I've been coding and reviewing math problems with the help of recent LLMs, and the clarity with which they lay out coding & math problems is really staggering.

I can highly HIGHLY recommend watching Karpathy's latest talk on "Software 3.0" (software in the era of AI) - it's a treasure trove of insightful analogies, and full of good advice on how to build modern apps with AI integration www.youtube.com/watch?v=LCEm...

Andrej Karpathy: Software Is Changing (Again)

YouTube video by Y Combinator

youtube.com

My 12yo son had to write an essay on the future of AI for school. When asked what would be the hardest job to get replaced by AI in the future, he answered: Parenting. Love it.

🚀 Join @distrinet.bsky.social at KU Leuven for cutting-edge research in Blockchain & Local-first Software! We’re building tools for secure, scalable decentralized apps with Web3 industry partners. 🤝 #Blockchain #ResearchJobs

All prepared to speak again about how to build "Least-authority" JavaScript apps, next week at #SecAppDev in Leuven. I'll talk about how you can use dialects like HardenedJS and tools like Lavamoat to sandbox your module dependencies. Live demo included: github.com/tvcutsem/lav...

Sign up to our Summer School on Security & Privacy in the Age of AI organized by #KULeuven, Sept. 9-12. Attend insightful lectures on the intersection of #ML and #cybersecurity, expand your skills, and connect with peers and international experts. Details: cybersecurity-research.be/summer-schoo...

Sign up to our PHD School on Security Testing and Verification, a 4-day course into dynamic & static application security testing, and software verification! From July 7 to 10, in Brussels. Organized by #VUB and #kuleuven. Top lecturers! Details: cybersecurity-research.be/summer-schoo...