r1ru (@ri5255) profile picture

low-level programmer

Joined October 2021
Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)Photo by r1ru (@ri5255)
I've released a blog series about modern Linux kernel exploitation, where you can learn some advanced techniques used in real-world kernel exploits. Enjoy! r1ru.github.io/categories/li…
4
265
2
976
47,018
ちなみにここで用いられている手法は、専門用語でFPCC (Foundational Proof-Carrying Code) と呼ばれる、2001年に提案された手法で、理論的には別に何も新しくないです。AIの進化によってようやく実用化できるようになったのがすごいところです dl.acm.org/doi/10.5555/87181…
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
2
1
30
2,492
一方、個人的にFPCCはやりすぎで、PCCの方が筋がいいと思っている。また、モジュラーに証明を行うためのlogicや、体系の健全性についての議論がなかったのが気になった。compilerから証明付きのバイナリを出力するなど、改善するためのアイデアは沢山あるので修論で実現したいね
1
291
セキュリティ× 形式検証は激熱の領域だと思っているので、私も形式検証の研究者見習いとして、実用化に貢献できるよう頑張っていきたい💪
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
2
1
43
2,041
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
663
1,072
639
9,775
2,092,599
10月から海外学振でさらに2年間、英国ケンブリッジ大学のComputer Science and Technologyにて研究を続けます。AIの定理証明能力が飛躍的に向上している今、その力を最大限応用した実用システムソフトウェアの形式検証の研究に真正面から取り組んでいます
1
8
121
4,427
弊社チームIkotas Labs, Inc.がPwn2Own Ireland 2026でMaster of Pwnの称号を得ました。これは最も多く難しいハッキングを成功させた事を意味します。今日だけは世界トップハッカーを名乗っても誰も文句は言わないでしょう😉
2
22
1
190
8,979
Introducing PageBreak, an agentic vulnerability discovery tool using deterministic validation to achieve a near-zero false positive rate. How it works: blog.google/security/agentic… For real-world vulnerabilities PageBreak has discovered 👇 bughunters.google.com/blog/p…
22
198
9
1,209
99,125
r1ru retweeted
i thought read() was a syscall wrapper, but it can dlopen a bytecode interpreter and execute your code "house of windy" turns this into leakless code execution with only OOB null byte writes pepsipu.com/blog/2026-09-dwa…
9
56
3
398
57,659
AOT CompilerがTCBに入っていたり、無限ループをkernel preemptionで防いでいたりとかなり力技なので、アイデアは面白いが、もうちょっと何とかできないかという感想
FUSEとWasmを利用して、既存のユーザー空間FUSEファイルシステムを、隔離された形でLinuxカーネル空間内で実行する手法の提案: usenix.org/conference/usenix…
1
5
629
FUSEとWasmを利用して、既存のユーザー空間FUSEファイルシステムを、隔離された形でLinuxカーネル空間内で実行する手法の提案: usenix.org/conference/usenix…
6
1
40
3,337
We're publishing our most detailed threat intelligence report to date. It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them. We disrupted every operation in the report, and used the lessons from them to strengthen our safeguards. Where appropriate, we also shared what we found with authorities and other AI companies. These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve. We’re publishing this report so others can spot the same activity on their own platforms, and so we can give the public a clearer view of how emerging threats develop. Read the report: anthropic.com/threat-intelli…
3,212
11,668
4,938
50,322
43,879,330
Today, Project Zero is releasing MAccConc, a tool by @tehjh that enables deterministic testing of race conditions on Linux. It can be used for fuzzing, ad-hoc exploration, regression tests and more! projectzero.google/2026/09/m…
4
114
4
447
40,579
10/23(金)発行予定の新刊『Windowsインフラのためのレッドチーム実践ガイド』の情報をAmazon、楽天で公開開始しました!ランサムウェア攻撃や標的型攻撃の目的の多くが最終的にActive Directoryの掌握となる現在、Windowsインフラの弱点を攻撃者の思考とともに学ぶ一冊です! amazon.co.jp/dp/4814401736
122
10
371
52,247
r1ru retweeted
Linux kernelで19年以上見過ごされていた0-day脆弱性を報告しました 悪用されると一般ユーザーからの権限昇格が可能になる脆弱性です 詳しくはこちら gmo-cybersecurity.com/blog/1…
24
278
13
1,653
290,477
就活しないとなぁ〜
1
13
2,302