Edward J. Schwartz's Avatar

Edward J. Schwartz

@ejschwar.bsky.social

Computer security researcher at CMU's Software Engineering Institute; {computer,car lease} hacker; rescue dog daddy; soccer player/referee; skier. https://edmcman.github.io/

105 Followers  |  89 Following  |  171 Posts  |  Joined: 18.11.2024  |  1.6126

Latest posts by ejschwar.bsky.social on Bluesky

I have done that before too, but the line spacing becomes messed up (set to like 200%). My vs code theme is also not really suitable for presentation so I also need to change that. Neither are a big deal but are annoying!

06.10.2025 12:05 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0
Post image

Back in the day I used to use pygments to convert to RTF. But that seems pretty antiquated.

I've been pretty impressed by snappify, but it feels like it's going to fall behind a paywall any second.

04.10.2025 15:17 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Hey internet. What is the best way to format source code in powerpoint in 2025?

Things I would like:
1. Supports assembly code (rules out carbon)
2. Maintained and working (rules out VS Code codesnap/polacode)

04.10.2025 15:01 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 2    ๐Ÿ“Œ 0
Snakemake

This looks like a cool way to declaratively orchestrate data processing: snakemake.github.io

How haven't I heard of this before?

11.09.2025 14:21 โ€” ๐Ÿ‘ 1    ๐Ÿ” 1    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
Does Work-Life Balance Make You Mediocre? - Cal Newport Last month, a 22-year-old entrepreneur named Emil Barr published a Wall Street Journal op-ed boasting a provocative title:โ€‹ โ€œโ€˜Work-Life Balanceโ€™ Will Keep You Mediocre.โ€โ€‹ He ... Read more

calnewport.com/does-work-li...

In graduate school, I worked 10 hour days on average, and did not work on weekends, unlike many of my colleagues. I knew that I couldn't do meaningful work beyond that. It is interesting to hear that Cal largely did the same thing!

01.09.2025 10:56 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Post image

TIL about the "Developer: Show Chat Debug View" command for GH Co-pilot.

23.07.2025 14:16 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

๐Ÿšจ Blog Post: ""Quantifying and Mitigating the Impact of Obfuscations on Machine-Learning-Based Decompilation Improvement... https://edmcman.github.io/blog/2025-07-11--quantifying-and-mitigating-the-impact-of-obfuscations-on-machine-learning-based-decompilation-improvement-published-at-dimva-2025/

11.07.2025 13:46 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Post image

"The dog ate our flight plan"?

07.07.2025 19:01 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Post image

Less than 24 hours to go! Get those submissions in ๐Ÿ’ป๐Ÿ”ฅโฉ

sure25.hotcrp.com/

07.07.2025 17:23 โ€” ๐Ÿ‘ 0    ๐Ÿ” 1    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

What is common knowledge in your field, but shocks outsiders?

With almost no exceptions, every single cybersecurity breach occurs via mechanisms the technology industry knows how to fully and robust defend against, but didn't

17.06.2025 03:22 โ€” ๐Ÿ‘ 1421    ๐Ÿ” 219    ๐Ÿ’ฌ 42    ๐Ÿ“Œ 134

๐Ÿšจ Blog Post: ""A Human Study of Automatically Generated Decompiler Annotations" Published at DSN 2025" https://edmcman.github.io/blog/2025-06-16--a-human-study-of-automatically-generated-decompiler-annotations-published-at-dsn-2025/

16.06.2025 16:46 โ€” ๐Ÿ‘ 3    ๐Ÿ” 1    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
srcML Dockerfile srcML Dockerfile. GitHub Gist: instantly share code, notes, and snippets.

srcML Dockerfile... gist.github.com/edmcman/edff...

11.06.2025 22:47 โ€” ๐Ÿ‘ 0    ๐Ÿ” 1    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
About debuginfod debuginfod is a service for software developers. It helps with diagnosing issues in software and centralises the storage of debug symbols, source code, etc. One of the main advantages to debuginfod...

How did I not know about this? Also, why is it not enabled by default?!

documentation.ubuntu.com/server/expla...

11.06.2025 15:01 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
Nova 6.7b - a Hugging Face Space by ejschwartz This application converts assembly code into C source code. Users need to input assembly code and specify the optimization type. The result is the corresponding C source code.

HF space for the Nova neural decompiler: huggingface.co/spaces/ejsch...

29.05.2025 13:12 โ€” ๐Ÿ‘ 0    ๐Ÿ” 1    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

ACM CCS review quality has really gone downhill.

19.05.2025 14:55 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
Rust Devs Think Weโ€™re Hopeless; Letโ€™s Prove Them Wrong (with C++ Memory Leaks)! Rust Devs Think Weโ€™re Hopeless; Letโ€™s Prove Them Wrong (with C++ Memory Leaks)! When Rust developers think of us C++ folks, they picture a cursed bloodline โ€” generational trauma passed dow...

"To them, every line of C++ we write is like playing Russian Roulette โ€” except all six chambers are loaded with undefined behavior."

www.babaei.net/blog/rust-de...

13.05.2025 13:00 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

If you're a grad student or an undergrad interested in research I need to you listen to me very carefully.

You cannot learn to write good research papers if you do not read good research papers.

Stop asking LLMs to summarize papers for you.

03.05.2025 20:25 โ€” ๐Ÿ‘ 2144    ๐Ÿ” 577    ๐Ÿ’ฌ 23    ๐Ÿ“Œ 67

Just tried to redeem some old Google Play gift cards I found. They "expired" despite not having any expiration date on them.

04.05.2025 23:32 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

๐Ÿšจ Blog Post: "Re-compiling Decompiler Output" https://edmcman.github.io/blog/2025-05-02--re-compiling-ghidra-decompiler-output/

03.05.2025 14:54 โ€” ๐Ÿ‘ 1    ๐Ÿ” 2    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
SURE 2025 | The Workshop on Software Understanding and Reverse Engineering The Workshop on Software Understanding and Reverse Engineering

I'm proud to announce that myself and @AtipriyaBajaj have created the Workshop on Software Understanding and Reverse Engineering (SURE), which will be co-located at CCS 2025. sure-workshop.org/

Please follow our workshop account @sureworkshop and RT it for visibility :).

25.04.2025 16:30 โ€” ๐Ÿ‘ 7    ๐Ÿ” 6    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0
Preview
Tiny Agents: a MCP-powered agent in 50 lines of code Weโ€™re on a journey to advance and democratize artificial intelligence through open source and open science.

@julien-c.hf.co tries to figure out what all the MCP hype is about: huggingface.co/blog/tiny-ag...

I wondered this too. I think the hype is because it enables non-programmers to use tools with LLM.

26.04.2025 12:09 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
SDK ReferenceSDK Reference A powerful disassembler and a versatile debugger

Hex-Rays' documentation for the decompiler SDK seems to have entered a black hole.

Thanks wayback machine!

web.archive.org/web/20240912...

22.04.2025 16:05 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
GitHub - langchain-ai/local-deep-researcher: Fully local web research and report writing assistant Fully local web research and report writing assistant - langchain-ai/local-deep-researcher

github.com/langchain-ai...

22.04.2025 14:15 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Are any of these "vibe coding" tools different than Co-pilot's agent mode? If so, how?

20.04.2025 14:06 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
crt.sh | Certificate Search Free CT Log Certificate Search Tool from Sectigo (formerly Comodo CA)

crt.sh is pretty useful OSINT source...

crt.sh?q=cmu.edu

This is the downside to "SSL everywhere".

18.04.2025 13:03 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
Aidapal Space - a Hugging Face Space by ejschwartz Discover amazing ML apps made by the community

huggingface.co/spaces/ejsch...

Another HF space for testing another neural RE model.

17.04.2025 17:30 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
MCP Security Notification: Tool Poisoning Attacks We have discovered a critical vulnerability in the Model Context Protocol (MCP) that allows for

invariantlabs.ai/blog/mcp-sec...

08.04.2025 13:47 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Yeah, I wrote something similar in BAP for Q a long time ago. It should be possible to implement with any emulator, but I'm hoping I can be lazy.

01.04.2025 15:53 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

If you execute both functions from the same state (registers & memory), you wind up with the same output state. Obviously memory needs to be handled lazily. For extern functions, ensure they are executed in same order with same args.

01.04.2025 15:49 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Does anyone know of tools that can use random testing to compare two binary functions for equivalence? STOKE almost does what I want, but it can't handle calls to dynamically linked library functions.

01.04.2025 15:31 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

@ejschwar is following 20 prominent accounts