Richard Johnson
@richinseattle.bsky.social
Fuzzing; Vulnerability Research;
Deep Learning; Reverse Engineering
Training & Publications @ http://fuzzing.io
Hacking the planet since 1995
Undercurrents.io BOFH
I'll stop the world and melt with you
Deep Learning; Reverse Engineering
Training & Publications @ http://fuzzing.io
Hacking the planet since 1995
Undercurrents.io BOFH
I'll stop the world and melt with you
Reposted by Richard Johnson
@richinseattle.bsky.social’s ai agents for cybersecurity course at RE//verse looks neat!
October 8, 2025 at 9:23 PM
@richinseattle.bsky.social’s ai agents for cybersecurity course at RE//verse looks neat!
Reposted by Richard Johnson
Miss our #defcon panel hosted by @richinseattle.bsky.social @vacci.ne and chompie? It's up on YouTube!
September 12, 2025 at 6:31 PM
Miss our #defcon panel hosted by @richinseattle.bsky.social @vacci.ne and chompie? It's up on YouTube!
Reposted by Richard Johnson
Phrack turns 40.
The digital drop is live.
Download it. Archive it. Pass it on.
💾 www.phrack.org
#phrackat40 #phrack72
The digital drop is live.
Download it. Archive it. Pass it on.
💾 www.phrack.org
#phrackat40 #phrack72
August 19, 2025 at 5:08 AM
Phrack turns 40.
The digital drop is live.
Download it. Archive it. Pass it on.
💾 www.phrack.org
#phrackat40 #phrack72
The digital drop is live.
Download it. Archive it. Pass it on.
💾 www.phrack.org
#phrackat40 #phrack72
Reposted by Richard Johnson
NEW: Earlier this month, two hackers published their findings in Phrack magazine after earlier breaking into the computer of a North Korean government hacker.
Now, in speaking with @lorenzofb.bsky.social, the two hackers explain why they went public — even though their breach was probably illegal.
Now, in speaking with @lorenzofb.bsky.social, the two hackers explain why they went public — even though their breach was probably illegal.
Hackers who exposed North Korean government hacker explain why they did it | TechCrunch
The two self-described hacktivists said they had access to the North Korean spy’s computer for around four months before deciding what they had found should be made public.
techcrunch.com
August 21, 2025 at 12:39 PM
NEW: Earlier this month, two hackers published their findings in Phrack magazine after earlier breaking into the computer of a North Korean government hacker.
Now, in speaking with @lorenzofb.bsky.social, the two hackers explain why they went public — even though their breach was probably illegal.
Now, in speaking with @lorenzofb.bsky.social, the two hackers explain why they went public — even though their breach was probably illegal.
Reposted by Richard Johnson
Are you going to @defcon.bsky.social??
We'll be giving away 9500 print copies of Phrack!
Come by main stage Sunday @ noon to see @vacci.ne @richinseattle.bsky.social and chompie talk hacker history! This will mark the first time Phrack staff appear together on DEF CON’s main stage.
We'll be giving away 9500 print copies of Phrack!
Come by main stage Sunday @ noon to see @vacci.ne @richinseattle.bsky.social and chompie talk hacker history! This will mark the first time Phrack staff appear together on DEF CON’s main stage.
July 29, 2025 at 5:52 PM
Are you going to @defcon.bsky.social??
We'll be giving away 9500 print copies of Phrack!
Come by main stage Sunday @ noon to see @vacci.ne @richinseattle.bsky.social and chompie talk hacker history! This will mark the first time Phrack staff appear together on DEF CON’s main stage.
We'll be giving away 9500 print copies of Phrack!
Come by main stage Sunday @ noon to see @vacci.ne @richinseattle.bsky.social and chompie talk hacker history! This will mark the first time Phrack staff appear together on DEF CON’s main stage.
Reposted by Richard Johnson
AI Agents for Cybersecurity
by Richard Johnson (@richinseattle.bsky.social)
www.hexacon.fr/trainer/john...
by Richard Johnson (@richinseattle.bsky.social)
www.hexacon.fr/trainer/john...
April 15, 2025 at 2:44 PM
AI Agents for Cybersecurity
by Richard Johnson (@richinseattle.bsky.social)
www.hexacon.fr/trainer/john...
by Richard Johnson (@richinseattle.bsky.social)
www.hexacon.fr/trainer/john...
Reposted by Richard Johnson
@richinseattle.bsky.social Richard Johnson, at the forefront of AI Security Research for years, is doing a new two day dojo course at CanSecWest2025_newtype, before 24/25 conference.
Check out his presentation last year at CanSecWest "The DL on LLM Code Analysis " at
secwest.net/2024-recordi...
Check out his presentation last year at CanSecWest "The DL on LLM Code Analysis " at
secwest.net/2024-recordi...
Applied Deep Learning AI for Cybersecurity from April 22 to April 23/2025 — secwest.net - secure virtual engagement
This class is designed to introduce students to the most effective tools and techniques for applying cutting-edge deep learning–based artificial intelligence to cybersecurity tasks. By leveraging AI-d...
www.secwest.net
March 16, 2025 at 11:27 PM
@richinseattle.bsky.social Richard Johnson, at the forefront of AI Security Research for years, is doing a new two day dojo course at CanSecWest2025_newtype, before 24/25 conference.
Check out his presentation last year at CanSecWest "The DL on LLM Code Analysis " at
secwest.net/2024-recordi...
Check out his presentation last year at CanSecWest "The DL on LLM Code Analysis " at
secwest.net/2024-recordi...
Generated a few fuzz harnesses using new local models, OlympicCoder was best, fixing own bugs zero-shot & few hallucinations
Open R1 OlympicCoder 32B
DeepSeek R1 Distill Qwen 32B
QwQ 32B
Gemma-3-27b-it
All 4bit quant. Coder was by bartowski, the rest were Unsloth dynamic quant
Open R1 OlympicCoder 32B
DeepSeek R1 Distill Qwen 32B
QwQ 32B
Gemma-3-27b-it
All 4bit quant. Coder was by bartowski, the rest were Unsloth dynamic quant
March 13, 2025 at 4:19 AM
Generated a few fuzz harnesses using new local models, OlympicCoder was best, fixing own bugs zero-shot & few hallucinations
Open R1 OlympicCoder 32B
DeepSeek R1 Distill Qwen 32B
QwQ 32B
Gemma-3-27b-it
All 4bit quant. Coder was by bartowski, the rest were Unsloth dynamic quant
Open R1 OlympicCoder 32B
DeepSeek R1 Distill Qwen 32B
QwQ 32B
Gemma-3-27b-it
All 4bit quant. Coder was by bartowski, the rest were Unsloth dynamic quant
My new APPLIED DEEP LEARNING AI FOR CYBERSECURITY training class is now available for sign ups at @reconmtl for 5500 CAD ($3838 USD) early bird pricing
Full syllabus and registration here:
recon.cx/2025/trainin...
Full syllabus and registration here:
recon.cx/2025/trainin...
February 10, 2025 at 11:08 PM
My new APPLIED DEEP LEARNING AI FOR CYBERSECURITY training class is now available for sign ups at @reconmtl for 5500 CAD ($3838 USD) early bird pricing
Full syllabus and registration here:
recon.cx/2025/trainin...
Full syllabus and registration here:
recon.cx/2025/trainin...
My Applied Deep Learning AI for Cybersecurity training will be at RECON’s 20th anniversary con! I have a fuzzing harness gen section but will also cover model training/tuning & AI agents w/ applications in malware, RE, bug hunting, and web app pen-testing. There are also 3 other fuzzing trainings!
February 8, 2025 at 1:17 AM
My Applied Deep Learning AI for Cybersecurity training will be at RECON’s 20th anniversary con! I have a fuzzing harness gen section but will also cover model training/tuning & AI agents w/ applications in malware, RE, bug hunting, and web app pen-testing. There are also 3 other fuzzing trainings!
Reposted by Richard Johnson
Friends, FBI has responded to my FOIA request for Kevin Mitnick's files, and have made them available to everyone via the FBI public portal here: vault.fbi.gov/kevin-mitnic...
Kevin Mitnick Part 01 (Final)
vault.fbi.gov
December 15, 2024 at 7:14 PM
Friends, FBI has responded to my FOIA request for Kevin Mitnick's files, and have made them available to everyone via the FBI public portal here: vault.fbi.gov/kevin-mitnic...
Reposted by Richard Johnson
Mount up, time to ride!
January 28, 2025 at 7:29 PM
Mount up, time to ride!
New Year, New Life.
January 6, 2025 at 7:47 PM
New Year, New Life.
Happy New Year!
January 1, 2025 at 2:47 AM
Happy New Year!
Did anyone else get a blue box for Christmas?
December 24, 2024 at 7:32 AM
Did anyone else get a blue box for Christmas?
Reposted by Richard Johnson
We updated our CFP for Phrack 72! The deadline is now April 1st 2025. Check the site for specifics on how to contribute, as well as some inspiration! We also posted a link to purchase physical copies of Phrack 71, and a donation link too. Enjoy!
phrack.org
phrack.org
December 16, 2024 at 10:56 PM
We updated our CFP for Phrack 72! The deadline is now April 1st 2025. Check the site for specifics on how to contribute, as well as some inspiration! We also posted a link to purchase physical copies of Phrack 71, and a donation link too. Enjoy!
phrack.org
phrack.org
So I guess I'm going to be participating in the Solana hackathon with some LLM magic. I could not have predicted this at the beginning of the year.
December 11, 2024 at 6:33 AM
So I guess I'm going to be participating in the Solana hackathon with some LLM magic. I could not have predicted this at the beginning of the year.
News: Murderer was fond of a game where you take the role of an assassin. The game? Among Us. Never mind the cute cartoony aesthetic, this is a training ground for would-be killers! ROFL.
December 11, 2024 at 2:47 AM
News: Murderer was fond of a game where you take the role of an assassin. The game? Among Us. Never mind the cute cartoony aesthetic, this is a training ground for would-be killers! ROFL.
I approve this message. A little digital hygiene will save your ass.
annual reminder to use:
- a password manager, Bitwarden is free
- with different passwords for each account (PW Managers make this easy)
- 2-factor auth for every website, that is not tied to your phone number and instead uses an auth app
it will save your ass
- a password manager, Bitwarden is free
- with different passwords for each account (PW Managers make this easy)
- 2-factor auth for every website, that is not tied to your phone number and instead uses an auth app
it will save your ass
December 10, 2024 at 6:44 AM
I approve this message. A little digital hygiene will save your ass.
If you're developing backend services for the web, you should probably be publishing your APIs using MCP so AIs know how to use them.
www.anthropic.com/news/model-c...
www.anthropic.com/news/model-c...
Introducing the Model Context Protocol
The Model Context Protocol (MCP) is an open standard for connecting AI assistants to the systems where data lives, including content repositories, business tools, and development environments. Its aim...
www.anthropic.com
December 10, 2024 at 6:21 AM
If you're developing backend services for the web, you should probably be publishing your APIs using MCP so AIs know how to use them.
www.anthropic.com/news/model-c...
www.anthropic.com/news/model-c...
Reposted by Richard Johnson
Watch the recording of my #ekoparty talk "Advanced #Fuzzing with #LibAFL" here:
youtu.be/FI7C37lz4Rg?...
Thanks @fede-k.bsky.social for this amazing event!
youtu.be/FI7C37lz4Rg?...
Thanks @fede-k.bsky.social for this amazing event!
December 10, 2024 at 6:01 AM
Watch the recording of my #ekoparty talk "Advanced #Fuzzing with #LibAFL" here:
youtu.be/FI7C37lz4Rg?...
Thanks @fede-k.bsky.social for this amazing event!
youtu.be/FI7C37lz4Rg?...
Thanks @fede-k.bsky.social for this amazing event!
I need some 2d sprite animations for a project. Dall-e knows what that means but is being stubborn. Anyone know a good resource besides fiverr?
December 9, 2024 at 5:18 AM
I need some 2d sprite animations for a project. Dall-e knows what that means but is being stubborn. Anyone know a good resource besides fiverr?
China announced a ban on exports of Gallium, Germanium, and Antimony - natural resources used in semiconductors, solar cells, lead alloys for military etc. I found myself looking for what that might mean for our industries and found these annual natural resource reports from USGS
Index of /pubs/periodicals/mcs2024
pubs.usgs.gov
December 4, 2024 at 4:38 AM
China announced a ban on exports of Gallium, Germanium, and Antimony - natural resources used in semiconductors, solar cells, lead alloys for military etc. I found myself looking for what that might mean for our industries and found these annual natural resource reports from USGS
Am I the only one who gets really annoyed about plagiarism on social media? It’s important to credit your sources no matter the medium.
This thread seems to be copied from someone else on Twitter without credit but is a good summary. Original: x.com/omarsar0/sta...
December 3, 2024 at 8:52 PM
Am I the only one who gets really annoyed about plagiarism on social media? It’s important to credit your sources no matter the medium.