Marius Momeu

43 posts

Marius Momeu

Marius Momeu

@MariusMomeu

Postdoc at UC Berkeley | PhD at TU Munich | Ex-Brown

Berkeley, California Katılım Kasım 2018
287 Takip Edilen88 Takipçiler
Marius Momeu
Marius Momeu@MariusMomeu·
We're building an agentic framework for scaling vulnerability research to find and fix (deep) bugs in critical software. Our agents cover the entire spectrum: bug finding, PoC generation, patch synthesis and testing!
Yiwei Hou@yiwei_hou

You are welcome to request a Revelio scan of your own repository: docs.google.com/forms/d/e/1FAI…. 🌟Full blog: m1-llie.github.io/Revelio-agent-…. With @MogicianTony, @MuxiLyu7038, @MariusMomeu, @dawnsongtweets, @koushik77, and David Wagner. @ericnwen and @shtigeryang also contributed.

English
0
0
0
48
Marius Momeu
Marius Momeu@MariusMomeu·
Try out our new open-source AI coding assistant for boosting your productivity right in your IDE or CLI! It supports all major models (API key/subscription), is fine tuned for delivering (hard) tasks reliably, and adopts a wide set of effective software engineering practices!
Koushik Sen@koushik77

I am thrilled to announce the release of a new version of KISS Sorcar at github.com/ksenxx/kiss_ai. KISS Sorcar is a general-purpose AI assistant and IDE, implemented as a Visual Studio Code extension and a web/mobile app, built on its KISS Agent Framework. It runs locally, is free and open source, and uses model API keys from major LLM providers such as Anthropic. It also supports Claude Code, or OpenAI Codex. New KISS Sorcar implements parallel agents, a Git worktree isolation, multiple tabs, a Sorcar web/mobile app, third-party agents, and skills. At its core, KISS Sorcar is a reliable coding and research assistant with strong browser support through Chromium and Playwright, multimodal support, Docker container support, and the ability to run agents for extended periods. KISS Sorcar scored 62.2% on Terminal Bench 2.0, slightly ahead of Cursor agent at 61.7% and Claude Code at 58%.

English
0
1
1
447
Marius Momeu
Marius Momeu@MariusMomeu·
I spent $174 getting KISS AI to translate 28K lines of C to Rust. 12 open-source projects, 100% success rate, some ran *faster* than C. The agent caught bugs, generated 1.8K tests, and much more. Full deep dive: dev.to/mariusmomeu/i-…
English
6
7
64
18.8K
Marius Momeu retweetledi
Xinyang Ge
Xinyang Ge@aegiryy·
We build a hybrid fuzzer for the Hyper-V hypervisor, and have caught 11 critical bugs in the most-privileged software! It enables symbolic execution over a control-flow trace logged by Intel PT, so you can enjoy fuzzing it at full speed. Full paper here: microsoft.com/en-us/research…
English
1
139
489
0
Marius Momeu retweetledi
sagitz
sagitz@sagitz_·
I'm excited to share information about our research, in which we (+@nirohfeld) found a critical vulnerability in Azure Cosmos DB itself - effectively allowing malicious actors to fully compromise databases of thousands of customers. @wiz_io #ChaosDB chaosdb.wiz.io
English
8
113
222
0
Marius Momeu retweetledi
Jason Kint
Jason Kint@jason_kint·
incoming… google more unsealed docs, this time in the Google case led by Arizona Attorney General. The newly unsealed material is underlined in green unsealed this week (left). Last year, Google proactively unsealed less risky material (right) when Judge first ruled. /1
Jason Kint tweet mediaJason Kint tweet media
English
16
304
711
0
Marius Momeu retweetledi
Vasileios Kemerlis
Vasileios Kemerlis@vkemerlis·
Tune in if you're interested in our work on protecting against data-only attacks using HW-assisted virtualization. #xMP: cs.brown.edu/~vpk/papers/xm… (@IEEESSP #SP20) -- Cc: @proskurinserg @MariusMomeu @s_hamedgh @polychronakis
Hiet Guillaume@GuillaumeHiet

May 28th silm-seminar.gitlabpages.inria.fr/season2/episod… - 14:00 CET - F. Guihéry @_sygus: OpenDTeX: secure boot and secure enclave by leveraging Intel TXT DRTM technology - 15:00 CET - V. Kemerlis @vkemerlis: Protecting Commodity Software against Data-only Attacks using Hardware-assisted Virtualization

English
0
5
10
0
Marius Momeu
Marius Momeu@MariusMomeu·
TIL: indirect function calls casted from masked flags exist in C! Guess where I found this!?
Marius Momeu tweet media
English
0
0
0
0
Marius Momeu retweetledi
Adam J Calhoun
Adam J Calhoun@neuroecology·
This is not a motherboard - it's the Gwangyang Steel Plant in South Korea, the world's largest steel mill
Adam J Calhoun tweet media
English
104
2.2K
11K
0
Marius Momeu retweetledi
Zuk
Zuk@ihackbanme·
The author of this post found the SolarWinds attack a 2-3 months before FireEye's announcement on December 8th 🤯reddit.com/r/Solarwinds/c…
Zuk tweet media
English
8
252
1K
0
Marius Momeu retweetledi
Mark
Mark@offlinemark·
Here's my favorite git feature that no one knows about: You can reference commits using the commit message instead of the hash. The ":/" syntax accepts a regex that matches any part of the commit message, returning the youngest matching commit. #Documentation/revisions.txt-emlttextgtemegemfixnastybugem" target="_blank" rel="nofollow noopener">git-scm.com/docs/revisions…
Mark tweet mediaMark tweet media
English
13
579
2.3K
0