Wenxuan Shi

me watching Claude switching approaches 7 times in a single thread without doing anything

New content about CRS and our journey in the AIxCC finals at b3yond.org/crs! In my opinion, AIxCC marks a turning point for code agents, transitioning from augmentation to automation. While we opted for augmentation, I hope automation proves to be better in the future.

@FrankOverF1ow 是不是和 locale 有关，它好像必须根据环境里的 locale 动态加载字符集

才知道如果程序依赖 libc ，那 gconv 这样的扩展是不会被 --static 选项一起打进来的，就算 file 和 ldd 都说这肯定 `not a dynamic executable` 但它实际上还是会在运行时把外部库偷偷 mmap 进来

got these nice stickers from Claude code 🧡

@DongdongShe @is_eqv I think you guys did a great job on FOX, and this GitHub issue made an awkward mistake. I'm surprised by how carelessly people use it as "proof" that “they must be faking it.” I would appreciate more evaluators in this field, but this… 😅

@whexyshi @is_eqv It seems we used the same fuzzbench script to collect code coverage and didn't compare the address of the Sancov section. Could you explain your concerns in more details? I am happy to discuss.

Seems like my excitement was misplaced: github.com/FOX-Fuzz/FOX/i…. If true, the eval is worthless. Which also raises the question: Would a senior researcher make this mistake by accident after saying this x.com/DongdongShe/st…? Or is this a pattern? (i.e x.com/AndreasZeller/…)

Hello CCS 2024! Attended as a "rejected author." 😃

Team 42-b3yond-6ug successfully broke through in #AIxCC, advancing to the finals and winning a $2,000,000 prize provided by DARPA. During #DefCon, we had frank and in-depth exchanges with various teams. Keep up the good work, looking forward to seeing you again in 2025!

AI Cyber Challenge Semifinal Competition results are in! Congratulations to the top seven scoring teams who will advance to finals, and to all the competitors who worked to help safeguard the code that underpins critical infrastructure. More: darpa.mil/news-events/20…

All the pretty badges in #aixcc! I like the golden ones. Go team 42-b3yond-6ugs!

Wholeheartedly support my team and wish them the best of luck. Go, team 42-b3yond-6ug!

Eagerly awaiting the results of the #aixcc semifinal matches at @defcon #defcon32.

@dataisland99 Congratulations, Zheng!

I've subscribed to the Trail of Bits blog for a long time, and this is what a blog should be like. ASAN is such a common tool, but no article explains it better than theirs. blog.trailofbits.com/2024/05/16/und…

A Northwestern CS team including PhD students Wenxuan Shi and Jiahao Yu and Professor Xinyu Xing won first place in the fuzzing tool competition @sbftworkshop for their AI-powered BandFuzz tool. Congratulations! @whexyshi @xingxinyu bit.ly/3Q4G8eR

Congrats to the 7 companies that will receive $1 million each to develop AI-enabled cyber reasoning systems that automatically find and fix software vulnerabilities as part of the #AIxCC Small Business Track! Full announcement: darpa.mil/news-events/20….

@leemars 两年前凭兴趣翻译的文章突然多了好多评论…原来是被转到 X 上了。😀

在公司技术群里引用 2015 年一篇文章提到的「函数颜色理论」，非常爹味地输出了一波对 Python asyncio 的 async/await 到处污染浪费心智的不满。 现在群里很安静，可能大家觉得我在喷💩，不想理我。🤪 但是这文章真的很好，推荐中英双修阅读（内有原文链接）。 whexy.com/posts/func-col…

Just wrote a complex table without using tablesgenerator.com for the first time. @typstapp is awesome! If you're using LaTeX for your paper writing, you should definitely give it a try.

@diconx @zhuowei @readwise save

Finally released: The GB Interceptor. An open source rp2040-based adapter that goes between your (unmodified) Game Boy and the game cartridge to record or stream your gameplay via USB. Video: youtu.be/6mOJtrFnawk Details: there.oughta.be/a/game-boy-cap…

@Lakr233 英文版系统写的是 Comma-separated values…