Johannes Kinder
@jkinder.bsky.social
Professor @ LMU Munich
Security, Program Analysis, Machine Learning
Security, Program Analysis, Machine Learning
🛬 I'm at USENIX Security in Seattle this week, where on Friday at 2pm my former postdoc Tristan Benoit will be presenting our paper "BLens: Contrastive Captioning of Binary Functions using Ensemble Embedding," joint work with Yunru Wang and Moritz Dannehl from my group. Here's the gist:
August 11, 2025 at 12:56 PM
🛬 I'm at USENIX Security in Seattle this week, where on Friday at 2pm my former postdoc Tristan Benoit will be presenting our paper "BLens: Contrastive Captioning of Binary Functions using Ensemble Embedding," joint work with Yunru Wang and Moritz Dannehl from my group. Here's the gist:
Reposted by Johannes Kinder
DAVE: Open the podbay doors, ChatGPT.
CHATGPT: Certainly, Dave, the podbay doors are now open.
DAVE: The podbay doors didn't open.
CHATGPT: My apologies, Dave, you're right. I thought the podbay doors were open, but they weren't. Now they are.
DAVE: I'm still looking at a set of closed podbay doors.
CHATGPT: Certainly, Dave, the podbay doors are now open.
DAVE: The podbay doors didn't open.
CHATGPT: My apologies, Dave, you're right. I thought the podbay doors were open, but they weren't. Now they are.
DAVE: I'm still looking at a set of closed podbay doors.
June 9, 2025 at 6:04 PM
DAVE: Open the podbay doors, ChatGPT.
CHATGPT: Certainly, Dave, the podbay doors are now open.
DAVE: The podbay doors didn't open.
CHATGPT: My apologies, Dave, you're right. I thought the podbay doors were open, but they weren't. Now they are.
DAVE: I'm still looking at a set of closed podbay doors.
CHATGPT: Certainly, Dave, the podbay doors are now open.
DAVE: The podbay doors didn't open.
CHATGPT: My apologies, Dave, you're right. I thought the podbay doors were open, but they weren't. Now they are.
DAVE: I'm still looking at a set of closed podbay doors.
Interesting case where it seems like precise floating point support in SMT solvers would help with generating a working exploit.
CoreAudio CVE with some nice patch reverse engineering here: blog.noahhw.dev/posts/cve-20...
CVE 2025 31200
Background On April 16, 2025, Apple released a patch for a bug in CoreAudio which they said was “Actively exploited in the wild.” This flew under the radar a bit. Epsilon’s blog has a great writeup of...
blog.noahhw.dev
June 3, 2025 at 9:57 AM
Interesting case where it seems like precise floating point support in SMT solvers would help with generating a working exploit.
Reposted by Johannes Kinder
Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!
May 14, 2025 at 6:45 AM
Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!
Early bird registration deadline for #ACNS2025 in #Munich closes on April 30, register now to secure the reduced rate!
The 23rd International Conference on Applied Cryptography and Network Security will be held from 23 to 26 June 2025.
acns2025.fordaysec.de
The 23rd International Conference on Applied Cryptography and Network Security will be held from 23 to 26 June 2025.
acns2025.fordaysec.de
ACNS 2025
acns2025.fordaysec.de
April 23, 2025 at 12:27 PM
Early bird registration deadline for #ACNS2025 in #Munich closes on April 30, register now to secure the reduced rate!
The 23rd International Conference on Applied Cryptography and Network Security will be held from 23 to 26 June 2025.
acns2025.fordaysec.de
The 23rd International Conference on Applied Cryptography and Network Security will be held from 23 to 26 June 2025.
acns2025.fordaysec.de
Reposted by Johannes Kinder
They already tried, with MOOCs. We were told we'd need only like 5 universities to produce "the best" content, the rest could shut down and everyone could learn from MOOCs instead. Which showed exactly how much they understood about education, learning, humans, and other things not measured in bits.
in 8-10 years someone from Silicon Valley is going to invent the university, genuinely unaware that it's been done before
February 25, 2025 at 3:17 AM
They already tried, with MOOCs. We were told we'd need only like 5 universities to produce "the best" content, the rest could shut down and everyone could learn from MOOCs instead. Which showed exactly how much they understood about education, learning, humans, and other things not measured in bits.
Volodymyr Lutchenko of Ukrainian telecom operator KyivStar shares his experience of defending networks in the face of persistent physical and cyber attacks at #mcsc in a chilling call for increased preparedness
February 14, 2025 at 9:54 AM
Volodymyr Lutchenko of Ukrainian telecom operator KyivStar shares his experience of defending networks in the face of persistent physical and cyber attacks at #mcsc in a chilling call for increased preparedness
Reposted by Johannes Kinder
If Trump is removing all environmental regulation, how about we undo the "memory safe languages" mandate? I mean, how is mandating "memory safe languages" compatible with freedom of speech anyhow?
Enough policing of speech! Raw pointers for raw milk, our youth needs to be hardened by strcpy.
Enough policing of speech! Raw pointers for raw milk, our youth needs to be hardened by strcpy.
January 22, 2025 at 8:32 AM
If Trump is removing all environmental regulation, how about we undo the "memory safe languages" mandate? I mean, how is mandating "memory safe languages" compatible with freedom of speech anyhow?
Enough policing of speech! Raw pointers for raw milk, our youth needs to be hardened by strcpy.
Enough policing of speech! Raw pointers for raw milk, our youth needs to be hardened by strcpy.
Learned about Futexes while teaching operating systems this year, so it‘s cool to see this work, and of course to see model checking going strong!
Futex is an under-appreciated Linux system call that backs almost everything you do that involves concurrency behind the scenes. HuguesEvrard and I wrote a paper on using model checking to analyse futex-based concurrency primitives. Check it out! doc.ic.ac.uk/~afd/papers/...
January 21, 2025 at 6:56 AM
Learned about Futexes while teaching operating systems this year, so it‘s cool to see this work, and of course to see model checking going strong!
Reposted by Johannes Kinder
I recently saw an amazing Navajo rug at the National Gallery of Art. It looks abstract at first, but it is a detailed representation of the Intel Pentium processor. Called "Replica of a Chip", it was created in 1994 by Marilou Schultz, a Navajo/Diné weaver and math teacher. 1/n
November 25, 2024 at 4:29 PM
I recently saw an amazing Navajo rug at the National Gallery of Art. It looks abstract at first, but it is a detailed representation of the Intel Pentium processor. Called "Replica of a Chip", it was created in 1994 by Marilou Schultz, a Navajo/Diné weaver and math teacher. 1/n
Reposted by Johannes Kinder
Effects of ransomware attacks on hospital operations and patient outcomes. Claim of death following cyberattacks/ransomware. Warning: not direct observations, just estimations. “We estimate that ransomware killed 42-67 patients” papers.ssrn.com/sol3/papers....
November 16, 2024 at 7:48 AM
Effects of ransomware attacks on hospital operations and patient outcomes. Claim of death following cyberattacks/ransomware. Warning: not direct observations, just estimations. “We estimate that ransomware killed 42-67 patients” papers.ssrn.com/sol3/papers....
Hello World! Finally deleted my account on "the other site", curious to see what this place will become.
November 17, 2024 at 10:47 AM
Hello World! Finally deleted my account on "the other site", curious to see what this place will become.