Ivan Lozano's Avatar

Ivan Lozano

@ivanlozano

Information security engineer. #Android #rust #memory-safety. Opinions are my own.

118
Followers
213
Following
3
Posts
21.08.2023
Joined
Posts Following

Latest posts by Ivan Lozano @ivanlozano

Preview
Will People Trust Voting by Phone? Alaska Is Going to Find Out.

The NYT just published an article largely hyping internet voting in Alaska.

I do not agree, and argue that the article has significant problems. Let’s look at a few of them 🧡

www.nytimes.com/2025/11/13/u...

13.11.2025 16:55 πŸ‘ 7 πŸ” 4 πŸ’¬ 1 πŸ“Œ 0
Preview
Future Architecture Technologies - POE2 and vMTE This blog post introduces two future technologies, Permission Overlay Extension version 2 (POE2) and Virtual Tagging Extension (vMTE).

POE2: community.arm.com/arm-communit...

26.10.2025 19:47 πŸ‘ 4 πŸ” 4 πŸ’¬ 0 πŸ“Œ 0
"Anna, Lindsey Halligan Here."
Anna Bower
Monday, October 20, 2025, 5:40 PM
Share On: f X inK My Signal exchange with the interim U.S. attorney about
the Letitia James grand jury.

"Anna, Lindsey Halligan Here." Anna Bower Monday, October 20, 2025, 5:40 PM Share On: f X inK My Signal exchange with the interim U.S. attorney about the Letitia James grand jury.

EXCLUSIVE: One Saturday afternoon in October, my phone lit up with a notification.

I glanced down at the message.

β€œAnna, Lindsey Halligan here,” it began.

So began my text exchange with the woman who is prosecuting the president's perceived political enemies.

www.lawfaremedia.org/article/anna...

20.10.2025 22:09 πŸ‘ 21868 πŸ” 6844 πŸ’¬ 1480 πŸ“Œ 1937
Hackceler8 2025
Hackceler8 2025 YouTube video by Hackceler8

Hackceler8 live stream will start on 2025-10-04 21:15 UTC / 14:15 PST

Schedule (PST)
14:15 - Live stream start
14:30 - Semifinals #1
16:30 - Semifinals #2
18:30 - Finals

www.youtube.com/watch?v=xN1W...

04.10.2025 07:15 πŸ‘ 2 πŸ” 1 πŸ’¬ 2 πŸ“Œ 1
Post image

Today, my research group @ Georgia Tech released a paper on vulnerabilities in Tile --- the second largest device finding network after Apple's AirTags.

You can read about it in Wired, reporting by @kimzetter.bsky.social!
www.wired.com/story/tile-t...

29.09.2025 13:45 πŸ‘ 61 πŸ” 34 πŸ’¬ 1 πŸ“Œ 2
Post image

GUIFuzz++ is the first general-purpose fuzzer for desktop GUI software! Fuzzing by translating AFL++ random input into user interaction with GUIs, leading to the discovery of 23 new bugs!

Paper: futures.cs.utah.edu/papers/25ASE.pdf
Source: github.com/FuturesLab/GUIFuzzPlusPlus

Go test some GUIs!

24.09.2025 20:52 πŸ‘ 18 πŸ” 11 πŸ’¬ 1 πŸ“Œ 0

Some good news:

Yesterday, FDA granted accelerated approval for elamipretide, the drug my niece relies on for treatment of her rare disease.

This was the result of tireless advocacy by patients, caregivers, and allies.

THANK YOU to everyone who shared Hope’s story. I truly believe it helped.

20.09.2025 19:55 πŸ‘ 1734 πŸ” 225 πŸ’¬ 46 πŸ“Œ 5

Great write up on this from @lhn.bsky.social here! www.wired.com/story/apple-...

14.09.2025 00:52 πŸ‘ 58 πŸ” 11 πŸ’¬ 0 πŸ“Œ 2

Oh look, the iOS vulnerability is yet another weird subcase of image decompression, who could possibly have predicted.

24.08.2025 15:42 πŸ‘ 117 πŸ” 18 πŸ’¬ 6 πŸ“Œ 1
Preview
Introducing Rusted Firmware-A (RF-A) - A Rust-Based reimagination of Trusted Firmware-A Why Rusted Firmware-A?

Very excited to see this

www.trustedfirmware.org/blog/rf-a-blog

#rust #memory-safety

19.08.2025 16:51 πŸ‘ 3 πŸ” 1 πŸ’¬ 0 πŸ“Œ 0
Post image

@blackhoodie.bsky.social will be at @sec-t.bsky.social on September 10th with a training on Linux Malware Reverse Engineering, for women by women! We have very few seats left 😁 blackhoodie.re/SecT2025/

14.08.2025 14:02 πŸ‘ 12 πŸ” 9 πŸ’¬ 0 πŸ“Œ 0
Post image Post image

At USENIX Security? Then check out:

Studying the Use of CVEs in Academia, won distinguished paper award www.usenix.org/conference/u...

Discovering and Exploiting Vulnerable Tunnelling Hosts, won most innovative research Pwnie @ DEFCON www.usenix.org/conference/u...

Big thanks to all co-authors!!

13.08.2025 22:30 πŸ‘ 15 πŸ” 7 πŸ’¬ 0 πŸ“Œ 1
Preview
Google's 'Big Sleep' Just Became the First-Ever AI to Prevent a Cyberattack Google's Big Sleep is just a year old, and for the first time it as able to detect and help close a vulnerability at risk of being exploited.

Quote of the day: "Nicely done. It doesn’t undo all the (often rightly deserved) bad press that AI agents have received lately, but good news is good news."

www.vice.com/en/article/g...

#BigSleep #VulnResearch

19.07.2025 01:25 πŸ‘ 2 πŸ” 1 πŸ’¬ 0 πŸ“Œ 0

I rarely post personal things. But I need to talk about my 4-year-old niece, Hope.

She has a rare disease. A drug called elamipretide has helped her survive.

But the FDA recently denied its approval.

Now, her health hangs in the balance.

Please share her story & urge the FDA to reconsider. 🧡

23.06.2025 21:21 πŸ‘ 7847 πŸ” 4805 πŸ’¬ 211 πŸ“Œ 248

Yes!

06.06.2025 15:42 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

B

06.06.2025 15:09 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

It has been genuinely moving β€” moved me to tears, actually β€” to see so much support for our work at @lawfaremedia.org.

Since yesterday, 3 additional donors have agreed to match contributions up to 5K each β€” thank you @judgeluttig.bsky.social for helping us get there! givebutter.com/journalism/a...

16.04.2025 23:51 πŸ‘ 3741 πŸ” 616 πŸ’¬ 45 πŸ“Œ 20

This is wonderful, but they are still far short of their goal. Please share and donate if you can. We need Lawfare more than ever.

17.04.2025 11:42 πŸ‘ 69 πŸ” 21 πŸ’¬ 0 πŸ“Œ 1