Lightnews — Scholar-powered news

Reposted by Toby Murray

KIT Graduate School Cyber Security @kitcybersec.bsky.social · 1d

You are an Early Career Researcher in #cybersec? Here is an opportunity: The AEC chairs of @USENIXSecurity '26 are looking for (self)nominations for the Artifact Evaluation Committee. Deadline: October 17th, 2025, so sign up soon!
@chwress.bsky.social, @kumarde.bsky.social, @aurore-fass.bsky.social

9 5

Toby Murray @tobycmurray.bsky.social · 1d

Amazing. Can you say more about how this was produced?

1

Reposted by Toby Murray

Jintor @jintor.itch.io · 2d

there's still great websites on the internet rouses.net

2 2 4

Toby Murray @tobycmurray.bsky.social · 2d

It never fails to amaze and frustrate when it’s the companies pushing security products that fail the most basic tests of secure product development

cje @cje.io · 2d

PATCH YO' IVANTI...OH WAIT NVM

ZDI Drops 13 Unpatched Ivanti Zero-Days Enabling Remote Code Execution

m.cje.io/48X7Ynz

ZDI Drops 13 Unpatched Ivanti Zero-Days Enabling Remote Code Execution

ZDI has publicly disclosed 13 unpatched vulnerabilities in Ivanti Endpoint Manager, including 12 RCE flaws and one local privilege escalation.

m.cje.io

1

Toby Murray @tobycmurray.bsky.social · 4d

The latest chapter in the ANOM story, in which the FBI and AFP deployed a fake secure phone system to spy on organised crime. The Australian High Court has unanimously ruled the operation legal and data collected can be used as evidence in prosecutions www.abc.net.au/news/2025-10...

High Court endorses use of encrypted phone app to monitor crime figures

The High Court has ruled on the use of information gathered through the AN0M app, which was developed by the Australian Federal Police for surveillance.

www.abc.net.au

Toby Murray @tobycmurray.bsky.social · 4d

This is a feature, not a bug. Rare events are, by definition, more informative than common ones.

Toby Murray @tobycmurray.bsky.social · 5d

Congratulations to you, Ally, and to TOPLAS. Bright times ahead

Toby Murray @tobycmurray.bsky.social · 15d

There’s a reason that human-to-human touch produces such strong emotional reactions, that the slightest unintended brush between humans elicits “sorry”. Humanoids will surely be unsafe to operate with humans absent such fine sensing.

2

Reposted by Toby Murray

Tim Miller @tmiller-uq.bsky.social · 16d

The deadline for my postdoc on scalable clinical decision support is closing in 1 week: 4 October (Australian Eastern standard Time). Please share with anyone that you think would be interested

Tim Miller @tmiller-uq.bsky.social · 26d

I'm hiring again! Please share. I'm recruiting a postdoc research fellow in human-centred AI for scalable decision support. Join us to investigate how to balance scalability and human control in medical decision support. Closing date: 4 October (AEST).
uqtmiller.github.io/recruitment/

Recruitment

uqtmiller.github.io

2

Reposted by Toby Murray

Mike Dodds @m-dodds.bsky.social · 25d

I wrote about Claude Code, which to my absolute astonishment is quite good at theorem proving. For people who don't know theorem proving, this is like spending your whole life building F1 engines and getting lapped by a Tesco's shopping trolley www.galois.com/articles/cla...

Claude Can (Sometimes) Prove It

www.galois.com

1 5 15

Reposted by Toby Murray

Tim Miller @tmiller-uq.bsky.social · 26d

I'm hiring again! Please share. I'm recruiting a postdoc research fellow in human-centred AI for scalable decision support. Join us to investigate how to balance scalability and human control in medical decision support. Closing date: 4 October (AEST).
uqtmiller.github.io/recruitment/

Recruitment

uqtmiller.github.io

1 7 2

Reposted by Toby Murray

Andrew Perfors @perfors.net · 26d

My university is now on Bluesky 💙

University of Melbourne @unimelb.bsky.social · 26d

Hello 👋

We're the official #UniMelb account!

Follow us for news, updates and information about UniMelb. For now, enjoy the blue skies over our Parkville campus 💙

1 3 43

Toby Murray @tobycmurray.bsky.social · 28d

Neat paper showing that automated bug fixing systems can be manipulated into introducing security flaws (eg. reverting CVE fixes) into your code. arxiv.org/pdf/2509.05372

arxiv.org

2

Toby Murray @tobycmurray.bsky.social · 29d

You’d think that the car company run by the bloke who runs a rocket company would have learned from Apollo 1

Dana Hull @danahull.bsky.social · Sep 12

🧵
1/ What is this photograph?

It's a custom-made mask fitted for a software engineer in northern Virginia who suffered third-degree burns on her face when the Tesla Model Y she was in crashed and caught on fire. A heroic crowd of bystanders could not open the doors

Toby Murray @tobycmurray.bsky.social · Sep 10

I’m hindsight it will seem obvious I think that perhaps the most under appreciated factor that kept memory safety so dangerous for so long was that no single company had control over the hardware, OS and compiler.

halvarflake.bsky.social @halvarflake.bsky.social · Sep 10

I have often stated that well-implemented memory tagging will be a game changer for memory corruptions. And it seems that with the next iPhone it's finally here: security.apple.com/blog/memory-...

Blog - Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research

Memory Integrity Enforcement (MIE) is the culmination of an unprecedented design and engineering effort spanning half a decade that combines the unique strengths of Apple silicon hardware with our adv...

security.apple.com

1 5

Toby Murray @tobycmurray.bsky.social · Sep 9

1

Reposted by Toby Murray

Clément Canonne @ccanonne.github.io · Sep 3

My petition to the 🇦🇺 Australian government: make part-time PhD students' stipends tax exempt!

📋 Read and sign here: www.aph.gov.au/e-petitions/...
⏰ Deadline: October 1

e-petitions

www.aph.gov.au

4 18 19

Toby Murray @tobycmurray.bsky.social · Aug 28

Just as with social media in 2010s, the current environment seems to grant new technologies a presumption of innocence when it comes to harms. We need high quality evidence; or risk blunt regulation eg UK Online Safety Acy, AU Socmed ban etc

1

Toby Murray @tobycmurray.bsky.social · Aug 28

I agree with the conclusion but quibble:
1. The lack of evidence linking to ChatGPT in the case of the VC’s purported public psychosis
2. The correlational evidence in the linked RCT being used to argue causation
3. Overly simplistic solutions like aborting conversations about suicide

1

Toby Murray @tobycmurray.bsky.social · Aug 27

❤️

Toby Murray @tobycmurray.bsky.social · Aug 27

Thoughtful reflections on how universities can and must adapt to the rise of generative AI, including by returning to ancient practices. www.nytimes.com/2025/08/26/o...

Left unaddressed is how scalable online education will survive the rise of AI without sacrificing academic integrity

Opinion | Students Hate Them. Universities Need Them. The Only Real Solution to the A.I. Cheating Crisis.

www.nytimes.com

1 5

Reposted by Toby Murray

Tom Eastman @tom.eastman.nz · Aug 26

Can't even build death star anymore, because of ewok

46 1.3K 5.7K

Toby Murray @tobycmurray.bsky.social · Aug 26

And Australia

Reposted by Toby Murray

Clément Canonne @ccanonne.github.io · Aug 26

A university and an academic publisher walk into a bar.

The publisher orders a pint, sells it back to the university, asks the barman to pay the bill.

19 94

Toby Murray @tobycmurray.bsky.social · Aug 26

Given that so much of what passes for professional boils down to looks and feel, it’s not surprising that GenAI should be used to produce professional reports

1