Edward J. Schwartz
@ejschwar.bsky.social
Computer security researcher at CMU's Software Engineering Institute; {computer,car lease} hacker; rescue dog daddy; soccer player/referee; skier.
https://edmcman.github.io/
https://edmcman.github.io/
Doctor office: please sign this paperwork stating you received policy X.
Me: Can I have policy X?
Doctor office: Uhhh no one has ever asked for policy X before.
🤦
Me: Can I have policy X?
Doctor office: Uhhh no one has ever asked for policy X before.
🤦
November 13, 2025 at 3:33 PM
Doctor office: please sign this paperwork stating you received policy X.
Me: Can I have policy X?
Doctor office: Uhhh no one has ever asked for policy X before.
🤦
Me: Can I have policy X?
Doctor office: Uhhh no one has ever asked for policy X before.
🤦
🚨 Blog Post: "Alias Blocking in Ghidra's Decompiler" https://edmcman.github.io/blog/2025-11-06--alias-blocking-in-ghidra-s-decompiler/
November 7, 2025 at 4:01 PM
🚨 Blog Post: "Alias Blocking in Ghidra's Decompiler" https://edmcman.github.io/blog/2025-11-06--alias-blocking-in-ghidra-s-decompiler/
🚨 Blog Post: ""Systematic Testing of C++ Abstraction Recovery Systems by Iterative Compiler Model Refinement" Published at SURE 2025" https://edmcman.github.io/blog/2025-10-15--systematic-testing-of-c-abstraction-recovery-systems-by-iterative-compiler-model-refinement-published-at-sure-2025/
October 23, 2025 at 2:57 PM
🚨 Blog Post: ""Systematic Testing of C++ Abstraction Recovery Systems by Iterative Compiler Model Refinement" Published at SURE 2025" https://edmcman.github.io/blog/2025-10-15--systematic-testing-of-c-abstraction-recovery-systems-by-iterative-compiler-model-refinement-published-at-sure-2025/
Reposted by Edward J. Schwartz
There should be a yearly one-day AWS scheduled outage day to smoke test for shit like "I bought a bed that depends 100% on us-east-1". (& all cloud providers with over $100m ARR).
"AWS outage day?"
"Yeah man, hoping my car starts driving again really soon here."
"Toilet. Won't. Flush."
"brutal."
"AWS outage day?"
"Yeah man, hoping my car starts driving again really soon here."
"Toilet. Won't. Flush."
"brutal."
October 22, 2025 at 3:59 PM
There should be a yearly one-day AWS scheduled outage day to smoke test for shit like "I bought a bed that depends 100% on us-east-1". (& all cloud providers with over $100m ARR).
"AWS outage day?"
"Yeah man, hoping my car starts driving again really soon here."
"Toilet. Won't. Flush."
"brutal."
"AWS outage day?"
"Yeah man, hoping my car starts driving again really soon here."
"Toilet. Won't. Flush."
"brutal."
Interesting article on the sustainability and profitability of AI companies.
www.wheresyoured.at/costs/
Tldr: they aren't.
It will be interesting to see how Cursor and GH Co-pilot fair over the coming months.
www.wheresyoured.at/costs/
Tldr: they aren't.
It will be interesting to see how Cursor and GH Co-pilot fair over the coming months.
This Is How Much Anthropic and Cursor Spend On Amazon Web Services
So, I originally planned for this to be on my premium newsletter, but decided it was better to publish on my free one so that you could all enjoy it. If you liked it, please consider subscribing to su...
www.wheresyoured.at
October 23, 2025 at 7:52 AM
Interesting article on the sustainability and profitability of AI companies.
www.wheresyoured.at/costs/
Tldr: they aren't.
It will be interesting to see how Cursor and GH Co-pilot fair over the coming months.
www.wheresyoured.at/costs/
Tldr: they aren't.
It will be interesting to see how Cursor and GH Co-pilot fair over the coming months.
Hey internet. What is the best way to format source code in powerpoint in 2025?
Things I would like:
1. Supports assembly code (rules out carbon)
2. Maintained and working (rules out VS Code codesnap/polacode)
Things I would like:
1. Supports assembly code (rules out carbon)
2. Maintained and working (rules out VS Code codesnap/polacode)
October 4, 2025 at 3:01 PM
Hey internet. What is the best way to format source code in powerpoint in 2025?
Things I would like:
1. Supports assembly code (rules out carbon)
2. Maintained and working (rules out VS Code codesnap/polacode)
Things I would like:
1. Supports assembly code (rules out carbon)
2. Maintained and working (rules out VS Code codesnap/polacode)
This looks like a cool way to declaratively orchestrate data processing: snakemake.github.io
How haven't I heard of this before?
How haven't I heard of this before?
Snakemake
snakemake.github.io
September 11, 2025 at 2:21 PM
This looks like a cool way to declaratively orchestrate data processing: snakemake.github.io
How haven't I heard of this before?
How haven't I heard of this before?
calnewport.com/does-work-li...
In graduate school, I worked 10 hour days on average, and did not work on weekends, unlike many of my colleagues. I knew that I couldn't do meaningful work beyond that. It is interesting to hear that Cal largely did the same thing!
In graduate school, I worked 10 hour days on average, and did not work on weekends, unlike many of my colleagues. I knew that I couldn't do meaningful work beyond that. It is interesting to hear that Cal largely did the same thing!
Does Work-Life Balance Make You Mediocre? - Cal Newport
Last month, a 22-year-old entrepreneur named Emil Barr published a Wall Street Journal op-ed boasting a provocative title: “‘Work-Life Balance’ Will Keep You Mediocre.” He ... Read more
calnewport.com
September 1, 2025 at 10:56 AM
calnewport.com/does-work-li...
In graduate school, I worked 10 hour days on average, and did not work on weekends, unlike many of my colleagues. I knew that I couldn't do meaningful work beyond that. It is interesting to hear that Cal largely did the same thing!
In graduate school, I worked 10 hour days on average, and did not work on weekends, unlike many of my colleagues. I knew that I couldn't do meaningful work beyond that. It is interesting to hear that Cal largely did the same thing!
TIL about the "Developer: Show Chat Debug View" command for GH Co-pilot.
July 23, 2025 at 2:17 PM
TIL about the "Developer: Show Chat Debug View" command for GH Co-pilot.
🚨 Blog Post: ""Quantifying and Mitigating the Impact of Obfuscations on Machine-Learning-Based Decompilation Improvement... https://edmcman.github.io/blog/2025-07-11--quantifying-and-mitigating-the-impact-of-obfuscations-on-machine-learning-based-decompilation-improvement-published-at-dimva-2025/
July 11, 2025 at 1:46 PM
🚨 Blog Post: ""Quantifying and Mitigating the Impact of Obfuscations on Machine-Learning-Based Decompilation Improvement... https://edmcman.github.io/blog/2025-07-11--quantifying-and-mitigating-the-impact-of-obfuscations-on-machine-learning-based-decompilation-improvement-published-at-dimva-2025/
"The dog ate our flight plan"?
July 7, 2025 at 7:01 PM
"The dog ate our flight plan"?
Reposted by Edward J. Schwartz
July 7, 2025 at 5:23 PM
🚨 Blog Post: ""A Human Study of Automatically Generated Decompiler Annotations" Published at DSN 2025" https://edmcman.github.io/blog/2025-06-16--a-human-study-of-automatically-generated-decompiler-annotations-published-at-dsn-2025/
June 16, 2025 at 4:46 PM
🚨 Blog Post: ""A Human Study of Automatically Generated Decompiler Annotations" Published at DSN 2025" https://edmcman.github.io/blog/2025-06-16--a-human-study-of-automatically-generated-decompiler-annotations-published-at-dsn-2025/
srcML Dockerfile... gist.github.com/edmcman/edff...
srcML Dockerfile
srcML Dockerfile. GitHub Gist: instantly share code, notes, and snippets.
gist.github.com
June 11, 2025 at 10:47 PM
srcML Dockerfile... gist.github.com/edmcman/edff...
How did I not know about this? Also, why is it not enabled by default?!
documentation.ubuntu.com/server/expla...
documentation.ubuntu.com/server/expla...
About debuginfod
debuginfod is a service for software developers. It helps with diagnosing issues in software and centralises the storage of debug symbols, source code, etc. One of the main advantages to debuginfod...
documentation.ubuntu.com
June 11, 2025 at 3:01 PM
How did I not know about this? Also, why is it not enabled by default?!
documentation.ubuntu.com/server/expla...
documentation.ubuntu.com/server/expla...
HF space for the Nova neural decompiler: huggingface.co/spaces/ejsch...
Nova 6.7b - a Hugging Face Space by ejschwartz
This application converts assembly code into C source code. Users need to input assembly code and specify the optimization type. The result is the corresponding C source code.
huggingface.co
May 29, 2025 at 1:12 PM
HF space for the Nova neural decompiler: huggingface.co/spaces/ejsch...
ACM CCS review quality has really gone downhill.
May 19, 2025 at 2:55 PM
ACM CCS review quality has really gone downhill.
"To them, every line of C++ we write is like playing Russian Roulette — except all six chambers are loaded with undefined behavior."
www.babaei.net/blog/rust-de...
www.babaei.net/blog/rust-de...
Rust Devs Think We’re Hopeless; Let’s Prove Them Wrong (with C++ Memory Leaks)!
Rust Devs Think We’re Hopeless; Let’s Prove Them Wrong (with C++ Memory Leaks)!
When Rust developers think of us C++ folks, they picture a cursed bloodline — generational trauma passed dow...
www.babaei.net
May 13, 2025 at 1:00 PM
"To them, every line of C++ we write is like playing Russian Roulette — except all six chambers are loaded with undefined behavior."
www.babaei.net/blog/rust-de...
www.babaei.net/blog/rust-de...
Reposted by Edward J. Schwartz
If you're a grad student or an undergrad interested in research I need to you listen to me very carefully.
You cannot learn to write good research papers if you do not read good research papers.
Stop asking LLMs to summarize papers for you.
You cannot learn to write good research papers if you do not read good research papers.
Stop asking LLMs to summarize papers for you.
May 3, 2025 at 8:25 PM
If you're a grad student or an undergrad interested in research I need to you listen to me very carefully.
You cannot learn to write good research papers if you do not read good research papers.
Stop asking LLMs to summarize papers for you.
You cannot learn to write good research papers if you do not read good research papers.
Stop asking LLMs to summarize papers for you.
Just tried to redeem some old Google Play gift cards I found. They "expired" despite not having any expiration date on them.
May 4, 2025 at 11:32 PM
Just tried to redeem some old Google Play gift cards I found. They "expired" despite not having any expiration date on them.
🚨 Blog Post: "Re-compiling Decompiler Output" https://edmcman.github.io/blog/2025-05-02--re-compiling-ghidra-decompiler-output/
May 3, 2025 at 2:54 PM
🚨 Blog Post: "Re-compiling Decompiler Output" https://edmcman.github.io/blog/2025-05-02--re-compiling-ghidra-decompiler-output/
Reposted by Edward J. Schwartz
I'm proud to announce that myself and @AtipriyaBajaj have created the Workshop on Software Understanding and Reverse Engineering (SURE), which will be co-located at CCS 2025. sure-workshop.org/
Please follow our workshop account @sureworkshop and RT it for visibility :).
Please follow our workshop account @sureworkshop and RT it for visibility :).
SURE 2025 | The Workshop on Software Understanding and Reverse Engineering
The Workshop on Software Understanding and Reverse Engineering
sure-workshop.org
April 25, 2025 at 4:30 PM
I'm proud to announce that myself and @AtipriyaBajaj have created the Workshop on Software Understanding and Reverse Engineering (SURE), which will be co-located at CCS 2025. sure-workshop.org/
Please follow our workshop account @sureworkshop and RT it for visibility :).
Please follow our workshop account @sureworkshop and RT it for visibility :).
@julien-c.hf.co tries to figure out what all the MCP hype is about: huggingface.co/blog/tiny-ag...
I wondered this too. I think the hype is because it enables non-programmers to use tools with LLM.
I wondered this too. I think the hype is because it enables non-programmers to use tools with LLM.
Tiny Agents: a MCP-powered agent in 50 lines of code
We’re on a journey to advance and democratize artificial intelligence through open source and open science.
huggingface.co
April 26, 2025 at 12:09 PM
@julien-c.hf.co tries to figure out what all the MCP hype is about: huggingface.co/blog/tiny-ag...
I wondered this too. I think the hype is because it enables non-programmers to use tools with LLM.
I wondered this too. I think the hype is because it enables non-programmers to use tools with LLM.