Moritz Schloegel

MetaCRiSP’s deadline got pushed back a week to Feb 19 AoE - you’ve got 10 days!

Call for Papers: MetaCRiSP Workshop (Security & Privacy).
A venue for metascience and critical reflection on research and peer-review practices in security & privacy.
Workshop: May 21, 2026 · San Francisco. (47th IEEE S&P)
Deadline: Feb 12, 2026.
More here: metacrisp.org
@mu00d8.bsky.social

You care about peer review itself? Great!

You are more worried about how our research is doing in terms of ethics or reproducibility? We’ve got you covered too!

📣 Call for papers!

If you're interested in all things metascience, consider submitting to the 1st Workshop on Metascience and Critical Reflections in Security & Privacy (MetaCRiSP), co-located with IEEE S&P. Deadline's Feb 12, AoE.

CfP & details: metacrisp.org

Reimplement decompiler integration by k4lizen · Pull Request #3401 · pwndbg/pwndbg Okay this is a chonker. See the docs/tutorials/decompiler-integration.md for some overview. And docs/assets/caps/decomp_integration_ex.png for an image example vs previous implementation pros we d...

Happy New Year's Eve! Our tool for placing decompilation (symbols, source, types) into the debugger (gdb) is now officially integrated into pwndbg! You will have access to it (decomp2dbg) in your next default install of pwndbg 🎉

Happy hacking:

Do LLMs actually help hackers reverse engineer and understand the software they want to exploit?

We ran the first fine-grained human study of LLMs + reverse engineering.
To appear at NDSS 2026.

Interested? Some quick findings in 🧵👇
Paper: www.zionbasque.com/f...

Must-read for fuzzing folks (read: tooling/algorithms/academia) by Addison Crump
addisoncrump.info/research/wha...

Empirical Security Analysis of Software-based Fault Isolation through Controlled Fault Injection We use browsers daily to access all sorts of information. Because browsers routinely process scripts, media, and executable code from unknown sources, they form a critical security boundary between us...

Interested in #fuzzing the V8 heap sbx? Check out the paper from @nbars.bsky.social et. al. accepted at @acm_ccs 2025. arxiv.org/abs/2509.07757

📢 Excited to announce that the results on BaseBridge, our project on improving cellular baseband emulation, are going public this week. Dyon will present at IEEE S&P on Monday 3pm, while David and I will be on stage at @offensivecon.bsky.social on Saturday 11am with even more details! 1/6

Thanks for having me, it was a lot of fun to discuss these topics :)

🔥 No fuzz drivers needed. Our paper on injecting greybox fuzzers into running systems at user-defined amplifier points (in-vivo fuzzing) was accepted at #ICSE25!

📝 mboehme.github.io/paper/ICSE25...
🧑‍💻 github.com/OctavioGalla... (subject to AE)

//Lead by Octavio Galland (former #MPI_SP intern).

🔮 ACM TOSEM Perspective Paper on Software Security in 2030 (Invited).

📝 mpi-softsec.github.io/papers/TOSEM...

Collab w/ Eric Bodden, Tevfik Bultan, Cristian Cadar, Liu Yang, and Giuseppe Scanniello

Tenure-Track Openings

Tenure Track @ MPIs in Computer Science (SP, SWS, INF).
🖊️ shlink.mpi-sws.org/faculty
📅 01. December 2024

www.mpi-sp.org/8521/tenure-...