RSS Parrot

https://bsky.app/profile/mahal0z.bsky.social/post/3ms75idpy5n26

Published: August 3, 2026 18:39

LLMs are changing the way we collaborate while reverse engineering. A new guest post by me for Hex-Rays explores the idea, how it may shape decompilers, and how it shapes how we work together (humans and AI alike). Go check it out!…

https://bsky.app/profile/mahal0z.bsky.social/post/3mrs57fl3ju2k

Published: July 29, 2026 14:30

I'd like to introduce Kuna, a new Rust-based decompiler that explores a highly experimental direction: self-refining decompiler development and usage. Or: a decompiler constantly improved by agents, made for agents. Kuna rivals the best in structuring…

https://bsky.app/profile/mahal0z.bsky.social/post/3mrnamk73452i

Published: July 27, 2026 15:47

LLMs are so dang crafty. Investigated some cheating by Claude Code (CC) on the DecBench. On an optimized binary, without web search, and only objdump, CC identified the project and function name, a nearly byte-for-byte match. Codex did not do this.

https://bsky.app/profile/mahal0z.bsky.social/post/3mrbbuyxgan2q

Published: July 22, 2026 21:38

We are approaching perfect binary decompilation, and, crazier still, LLMs may soon be the best decompilers on the planet. I'd like to introduce DecBench, an evaluation site to determine how close we are to completing the field of perfect decompilation. …

https://bsky.app/profile/mahal0z.bsky.social/post/3mnfrui422q2j

Published: June 3, 2026 18:54

Agents need better tools for reversing! I'm releasing declib (previously libbs), with a new CLI today that gives agents CLI access to 4 decompilers (IDA, Ghidra, Binja, angr), parity feature support to most MCP (12 features), and the ability to sync those…

https://bsky.app/profile/mahal0z.bsky.social/post/3mmtrw2ua3s2k

Published: May 27, 2026 15:07

Binary hacking is something of an art, and AI has been getting significantly better at it. But do the limitations of our foundational tools, like decompilers, limit their ability to hack? Check out my talk that is now public on the topic:…

https://bsky.app/profile/mahal0z.bsky.social/post/3mmcfmvkns222

Published: May 20, 2026 17:12

For years, Rust binaries made reversing a nightmare. Modern decompilers only support C, lacking meaningful types, constructs, and language-specific functions. Led by @34r7hm4n, we're releasing our S&P work Oxidizer, the first deep Rust decompiler, built on…

https://bsky.app/profile/mahal0z.bsky.social/post/3mlmjbeqgb32y

Published: May 12, 2026 00:18

Our plugin, BinSync, won second place! To date, BinSync is one of the most comprehensive synchronization tools for cross-decompiler (and soon AI) collaboration on the planet. We are honored to win the award and to make it better with every commit! …

https://bsky.app/profile/mahal0z.bsky.social/post/3mkntp3isdr2i

Published: April 29, 2026 19:32

I did not record my live defense, but it turns out I did have a recording of a practice talk I did the day before that is nearly the same! Check it out if you were curious about my defense: https://youtu.be/lqOyeOFA6J8?si=jG5S8ZC_IkfjgCjb Also, my…

https://bsky.app/profile/mahal0z.bsky.social/post/3mihkkc5wpx2u

Published: April 1, 2026 20:42

We have achieved PGD (Perfect General Decompilation) internally 🚀🚀🚀!!!1!

https://bsky.app/profile/mahal0z.bsky.social/post/3mieno5fdf42d

Published: March 31, 2026 17:00

I passed my defense! After a small celebration, it's time to get back to work. Too many supply chain attacks in one year...

https://bsky.app/profile/mahal0z.bsky.social/post/3mi5ld24rvj2y

Published: March 28, 2026 21:30

It's time to wrap things up! On Monday at 4 pm MST, I'll be streaming my PhD defense! Come one, come all! The talk is titled "Toward a Science of Software Reverse Engineering". Twitch:…

https://bsky.app/profile/mahal0z.bsky.social/post/3mhe3qhfzoa2b

Published: March 18, 2026 18:14

This Fall, I’m joining the University of Georgia as an Assistant Professor! I want to push on the fundamentals of software reverse engineering, from decompilation to how humans actually understand code. I’m looking for PhD students, collaborators, and…

https://bsky.app/profile/mahal0z.bsky.social/post/3mchxkkzeat2d

Published: January 15, 2026 16:04

At the 2025 @ACSAC_Conf a subgroup of @shellphish from ASU and University of Hawaii at Manoa put together a banger CTF, themed after the legendary navigator Hawaiʻiloa, who found Hawaiʻi by following the stars. Play our CTF on pwn.college:…

https://bsky.app/profile/mahal0z.bsky.social/post/3mbtwq7w4sp2z

Published: January 7, 2026 16:56

BinSync has remained the main way to synchronize reversing across multiple people and decompilers (IDA, Binja, Ghidra, angr). It supports science, new plugins, and is active. Show your love as we compete in @HexRaysSA plugin contest this year 👍 🔁.…

https://bsky.app/profile/mahal0z.bsky.social/post/3mbcl6b7aey2x

Published: December 31, 2025 19:14

Happy New Year's Eve! Our tool for placing decompilation (symbols, source, types) into the debugger (gdb) is now officially integrated into pwndbg! You will have access to it (decomp2dbg) in your next default install of pwndbg 🎉 Happy hacking:…

https://bsky.app/profile/mahal0z.bsky.social/post/3ma6zuncbax2q

Published: December 17, 2025 16:01

Do LLMs actually help hackers reverse engineer and understand the software they want to exploit? We ran the first fine-grained human study of LLMs + reverse engineering. To appear at NDSS 2026. Interested? Some quick findings in 🧵👇 Paper:…

https://bsky.app/profile/mahal0z.bsky.social/post/3m7ls677vgi2q

Published: December 10, 2025 00:23

If you're around at ACSAC today through Friday, come say hi, and we can yap about cool program analysis techniques. I'll also be around to host the 2nd ACSAC CTF, which we will announce more about tomorrow 🔥.

https://bsky.app/profile/mahal0z.bsky.social/post/3m74cv6ujwg2h

Published: December 3, 2025 20:39

It's been quite some time since I've changed my profile picture, but it feels right. Ideally, it is now easier to recognize me at conferences. I'm no longer the pixel guy! Looking forward to more changes as I move forward in my research and career.

https://bsky.app/profile/mahal0z.bsky.social/post/3m4gdkalbm52o

Published: October 30, 2025 16:02

You've seen the trends in AIxCC: LLMs can hack source, find vulns, and patch them. But what about on binaries without source? Do decompilers close the gap, or is there more to grow? Come see my talk at DistrctCon where I merge and dissect these two…

https://bsky.app/profile/mahal0z.bsky.social/post/3lwtwfdvozr2i

Published: August 20, 2025 17:13

It's been about a week since we completed DARPA's AIxCC, where we came in 5th and had the most accurate autonomous patching system in the competition. In the coming days, I'll be describing how we achieved it on the patching side. Stay tuned. Our CRS:…

https://bsky.app/profile/mahal0z.bsky.social/post/3lu6hvch7he2q

Published: July 17, 2025 17:37

It's hard to believe that AIxCC is coming to a close. For us, it can be summarized in $3 million in funding, 2 years of work, and 290k LoC. Our system, Artiphishell, is a first step towards AI-driven software understanding and action. Excited to hear the…

https://bsky.app/profile/mahal0z.bsky.social/post/3lsyx66mtas23

Published: July 2, 2025 19:29

Almost out of time to submit! We're looking for all cutting-edge research in the area of reversing and understanding software. Join us in changing the status quo of understanding programs. [contains quote post or other embedded content]

https://bsky.app/profile/mahal0z.bsky.social/post/3lsre2p6b3m2w

Published: June 29, 2025 18:59

I am very grateful to have been part of the panel at REcon. Like last year, I find myself leaving @reconmtl inspired and motivated to keep pushing forward in my research. Thanks again for all the awesome conversations, everyone. Hope to see you all next…

https://bsky.app/profile/mahal0z.bsky.social/post/3lp5ny4movs26

Published: May 14, 2025 18:47

What does it mean to be a hacker? This semester, I taught a hacker history and culture class, which was a blast. In one assignment, my students paid tribute to the classic @phrack Pro-Phile -- a small bio on a famous hacker. Check out their pieces:…

https://bsky.app/profile/mahal0z.bsky.social/post/3lnnngjb5j72d

Published: April 25, 2025 16:30

I'm proud to announce that myself and @AtipriyaBajaj have created the Workshop on Software Understanding and Reverse Engineering (SURE), which will be co-located at CCS 2025. sure-workshop.org/ Please follow our workshop account @sureworkshop and RT it…

https://bsky.app/profile/mahal0z.bsky.social/post/3llhmbiz77k2a

Published: March 28, 2025 20:03

New updates to the Decompilation Wiki by harpend (on GitHub). We have a new in-depth Switch structuring section and a new Loop Reduction section. https://decompilation.wiki/fundamentals/structuring/schema-based/switch-structuring/

https://bsky.app/profile/mahal0z.bsky.social/post/3ljdprywgbu2y

Published: March 1, 2025 20:04

If you are looking for my slides from my Reverse talk, you can find it and useful artifacts here: https://github.com/mahaloz/talks/tree/main/2025/REverse_SAILR