Michalis Polychronakis

pwn.college Learn to Hack!

Hello hackers! A belated announcement of an awesome new thing we're trying out in @pwncollege: #AdventOfPwn! Every day (starting yesterday - sorry for the belated post!), we're launching a new challenge at pwn.college/advent-o... for your hack-racing pleasure.

On December 4, 2007, in the Usenet group “Friends of the Friendless,” someone wrote:
“Happy Friendsgiving Y’all!”

And that is the first recorded use of ‘Friendsgiving’ in print.

📢 Announcing hacklore.org 📢

It’s time to retire outdated cyber advice! More than 80 cybersecurity veterans have signed an open letter urging a shift from folklore to guidance that actually helps people avoid the most common attacks. 🔐

Blog: medium.com/@boblord/let...

Site: www.hacklore.org

We can have old Google back by setting the Web tab as default (at least with Firefox): bsky.app/profile/mike...

I gave these as a gift ages ago! In the 2000s, our gadgets dressed better than we did.

Paschalis (@pbekos.bsky.social) presenting our work on PII leakage through Meta Pixel at ACM CCS 2025 | paper: www3.cs.stonybrook.edu/~mikepo/pape... | code+data: github.com/pasxalisbeko...

🗣️ Call for Papers – #DIMVA26
Deadlines are out!
📅Cycle 1 is Dec 3.
CfP is live 👉 dimva.org/dimva2026
📍 Chania, Greece | 1–3 July 2026
Don’t miss your chance to share your research! #CFP

Open Social — overreacted The protocol is the API.

i wrote about atproto and why it matters

The day Return became Enter A deep dive into the convoluted and fascinating story of one of the most important keys on the keyboard

I posted online the 2023 essay that was available as a Shift Happens booklet before: The convoluted history of Return and Enter on keyboards. aresluna.org/the-day-retu...

Phrack 40th Anniversary ansi art by Harvest

Phrack turns 40.
The digital drop is live.
Download it. Archive it. Pass it on.
💾 www.phrack.org
#phrackat40 #phrack72

Frame of preference A story of early Mac settings told by 10 emulators.

I wrote something new! It’s a UI design history essay about Mac’s Control Panel, and it uses emulation in some… maybe new and maybe interesting ways?

aresluna.org/frame-of-pre...

Arrival time 25:45

Maryam (@mrostamipoor.bsky.social) presenting our work on protecting Kubernetes Secrets at IEEE EuroS&P 2025 | paper: www3.cs.stonybrook.edu/~mikepo/pape... | source code: github.com/mrostamipoor...

Dan Geer and I write on lawfare about AI and code security : www.lawfaremedia.org/article/ai-a...

A reminder that the @nytimes.com told New Yorkers to not rank Mamdani at all, & instead endorsed former hedge fund manager Whitney Tilson.

Tilson sits at a whopping .8%.

Corporate media trust is dead. They killed themselves by failing to fulfill their promise of holding the powerful accountable.

Person sitting with a banner that reads YOU ARE ALL COWARDS

This guy is just posted up outside of Congress and I’m honestly not sure what his political views are but I agree

Bootstrapping HTTP/1.1, HTTP/2, and HTTP/3 How do we get from HTTP/1.1 all the way to 11... I mean, to HTTP/3? Let's look at the path browsers take.

New blog post! Bootstrapping HTTP/1.1, HTTP/2, and HTTP/3 -- redirects, HSTS, Alt-Svc, ALPN, HTTPS DNS records, oh my.

https://www.netmeister.org/blog/http-123.html

DIMVA is taking place July 9 to 11 in Graz!
We offer diversity grants for participants who identify as women, non-binary, or belong to other underrepresented groups in IT security.

Each grant covers a total of up to 800€.

Applications are open until May 31, 2025.

See dimva.org/dimva2025/#d...

An article titled "How the Web Became Unreadable", posted on Medium. There is a soft paywall asking you to sign in, covering most of the article. Screenshot found on Mastodon https://beige.party/@mayintoronto/114497234942335666

Hello hackers! Another @pwncollege semester ends, continuing @ASU's @ace_inst's never-ending quest to revolutionize the way hackers learn to become productive members of the cybersecurity community. Read on to learn what this means for students and Capture the Flag! 🧵

We are hosting the Information Security Conference (ISC) 2025 at Sungkyunkwan University! ISC is a long-standing security conference with a 28-year history

Prof. Hyungjoon Kevin Koo and Hojoon Lee will jointly serve as General Chairs this year.

CFP: isc25.skku.edu/call-for-pap...

Star Wars Intro Scroll Episode IV It Was All So Stupid Seriously, you would not believe how stupid it was. Every day, unrelentingly, just the dumbest stuff by the absolute worst people. And what made it worse was knowing that we’d brought this on ourselves.

#DIMVA25 is approaching fast! Have you registered yet? 😎

www.dimva.org/dimva2025

We are hosting the Information Security Conference (ISC) 2025 at Sungkyunkwan University! ISC is a long-standing security conference with a 28-year history

Prof. Hyungjoon Kevin Koo and Hojoon Lee will jointly serve as General Chairs this year.

For more information: isc25.skku.edu

So good. 🤡

@brendanvduke.bsky.social

Maryam (@mrostamipoor.bsky.social) presenting our work on protecting against memory leakage attacks on serverless platforms at NDSS 2025 | paper: www3.cs.stonybrook.edu/~mikepo/pape... | source code: github.com/mrostamipoor...

WYOMING:
“Thank you, Madam chairman.”
“I prefer ‘Mister’ chairman.”
“Well you all voted preferred pronouns cannot be compelled speech.”

Star Wars spoof comparing the rebel alliance to the current hapless Democratic Party.

Depressing brilliance from my pal Ruben Bolling.