corpus.blog
41554 blogs · [ { "id": "01a0bb99-b6a1-736e-93bb-e8ec96780867", "title": "x402 or How to Race Against the Blockchain", "url": "https://nebelwelt.net/blog/2026/0917-x402bugs.html", "published_at": "2026-09-17T12:15:00+00:00" }, { "id": "01a0bb99-b6a1-736e-93bb-e8ec975c2c7f", "title": "VulGenie: Mining Security Patches to Find API Violation Bugs", "url": "https://nebelwelt.net/blog/2026/0917-vulgenie.html", "published_at": "2026-09-17T11:36:00+00:00" }, { "id": "01a0bb99-b6a1-736e-93bb-e8ec98313fbd", "title": "CrossFit: Demystifying VM Callback Bugs", "url": "https://nebelwelt.net/blog/2026/0916-crossfit.html", "published_at": "2026-09-16T15:18:00+00:00" }, { "id": "01a0bb99-b6a1-736e-93bb-e8ec9887d5b6", "title": "PrivacyShield: Privacy-aware Tracking Protection", "url": "https://nebelwelt.net/blog/2026/0915-privacyshield.html", "published_at": "2026-09-15T16:21:00+00:00" }, { "id": "01a0bb99-b6a1-736e-93bb-e8ec98a8900c", "title": "Exploiting Android Apps with Counterfeit Art", "url": "https://nebelwelt.net/blog/2026/0914-art.html", "published_at": "2026-09-15T03:32:00+00:00" }, { "id": "01a0bb99-b6a1-736e-93bb-e8ec98e0060d", "title": "Grape: Squeezing Juicy Variant Bugs Out of Modern Browsers", "url": "https://nebelwelt.net/blog/2026/0913-grape.html", "published_at": "2026-09-13T23:21:00+00:00" }, { "id": "01a0952b-0a4d-717a-b0af-b4c7996a168e", "title": "SymCTS: Untangling Symbolic Execution and Fuzzing", "url": "https://nebelwelt.net/blog/2026/0911-symcts.html", "published_at": "2026-09-11T18:52:00+00:00" }, { "id": "01a087ad-02c6-7326-a372-39d7868c6f3c", "title": "IEEE Symposium on Security and Privacy (Oakland) '26", "url": "https://nebelwelt.net/blog/2026/0521-oakland.html", "published_at": "2026-05-21T18:25:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5533ebeec43", "title": "TÄMU: Emulating Trusted Applications", "url": "https://nebelwelt.net/blog/2026/0521-taemu.html", "published_at": "2026-05-20T17:21:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5533f92273d", "title": "The AIpocalypse or how LLM-based exploitation is the new normal", "url": "https://nebelwelt.net/blog/2026/0420-AIpocalypse.html", "published_at": "2026-04-21T02:11:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e553404105a7", "title": "Sysyphuzz: the pressure for more coverage", "url": "https://nebelwelt.net/blog/2026/0226-sysyphuzz.html", "published_at": "2026-02-27T00:05:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e55340d9ba25", "title": "39c3: Master reset in Hamburg", "url": "https://nebelwelt.net/blog/2025/1230-39c3.html", "published_at": "2025-12-31T00:22:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e55340ec4809", "title": "Not To Be Trusted - A Fiasco in Android TEEs", "url": "https://nebelwelt.net/blog/2025/1227-fiasco.html", "published_at": "2025-12-28T03:30:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5534171aa7d", "title": "AISec and the exploration of the Chinese soul", "url": "https://nebelwelt.net/blog/2025/1130-aisec.html", "published_at": "2025-11-30T18:24:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e55341dbf0f8", "title": "Droidot: Vulnerable Native Libraries on Android", "url": "https://nebelwelt.net/blog/2025/0813-droidot.html", "published_at": "2025-08-13T17:24:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e553427bd946", "title": "NASS: Fuzzing Native Android System Services", "url": "https://nebelwelt.net/blog/2025/0813-nass.html", "published_at": "2025-08-13T17:24:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e553432ba582", "title": "SuRI'25 on Security, Systems, and Formal Methods", "url": "https://nebelwelt.net/blog/2025/0613-suri.html", "published_at": "2025-06-13T21:55:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e553434dd098", "title": "NDSS25: Exploring San Diego", "url": "https://nebelwelt.net/blog/2025/0227-ndss.html", "published_at": "2025-02-27T17:55:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e55343ae83d6", "title": "Type++: A Type-Safe C++ Dialect", "url": "https://nebelwelt.net/blog/2025/0226-typepp.html", "published_at": "2025-02-27T04:55:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e55344575f36", "title": "Dumpling: dumping fine-grained execution state", "url": "https://nebelwelt.net/blog/2025/0226-dumpling.html", "published_at": "2025-02-27T04:05:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e55344a4f68a", "title": "QMSan: discovering uninitialized memory errors in binaries", "url": "https://nebelwelt.net/blog/2025/0226-qmsan.html", "published_at": "2025-02-27T03:40:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e553457d2b76", "title": "Truman: discovering hypervisor bugs through virtual device models", "url": "https://nebelwelt.net/blog/2025/0226-truman.html", "published_at": "2025-02-27T02:45:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e553467ce551", "title": "Auto-tagging SPAM emails", "url": "https://nebelwelt.net/blog/2025/0127-spam.html", "published_at": "2025-01-28T02:45:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e55347270e77", "title": "38c3: Hutzelwutze in Hamburg", "url": "https://nebelwelt.net/blog/2024/1230-38c3.html", "published_at": "2024-12-30T20:52:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e55347c8d959", "title": "From Fuzzing to Frameworks: 2024 Research Highlights", "url": "https://nebelwelt.net/blog/2024/1227-retrospective.html", "published_at": "2024-12-27T14:25:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e55348bfa2fe", "title": "RIP Niklaus Wirth", "url": "https://nebelwelt.net/blog/2024/0105-wirth.html", "published_at": "2024-01-05T16:22:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5534940d3bd", "title": "37c3: Chaos returning to Hamburg", "url": "https://nebelwelt.net/blog/2023/1230-37c3.html", "published_at": "2023-12-31T02:29:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5534a22bc99", "title": "Writing (successful) ERC grants in Europe", "url": "https://nebelwelt.net/blog/2022/0906-ERC_grant.html", "published_at": "2022-09-06T19:09:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5534a94144e", "title": "Second factor on VPNs considered harmful", "url": "https://nebelwelt.net/blog/2022/0711-2nd_shmactor.html", "published_at": "2022-07-12T03:35:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5534afdad53", "title": "PhD at EPFL, in Europe", "url": "https://nebelwelt.net/blog/2021/0121-phd_at_epfl.html", "published_at": "2021-01-22T04:10:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5534ba4f94c", "title": "Positive reviewing in software security", "url": "https://nebelwelt.net/blog/2019/1207-ndsspc.html", "published_at": "2019-12-07T10:01:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5534ba8b3c3", "title": "Expedia: from software bug to customer service nightmare, a modern Odyssey", "url": "https://nebelwelt.net/blog/2019/0701-expedia.html", "published_at": "2019-07-02T02:10:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5534c1065be", "title": "How to install a Canon MF633Cdw on a modern Debian", "url": "https://nebelwelt.net/blog/2019/0610-MF633Cdw.html", "published_at": "2019-06-10T20:03:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5534c195365", "title": "The Fuzzing Hype-Train: How Random Testing Triggers Thousands of Crashes", "url": "https://nebelwelt.net/blog/2019/0401-FuzzTrain.html", "published_at": "2019-04-01T14:25:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5534c9632eb", "title": "SMoTherSpectre: transient execution attacks through port contention", "url": "https://nebelwelt.net/blog/2019/20190306-SMoTherSpectre.html", "published_at": "2019-03-06T21:22:00+00:00" }, { "id": "01a087ad-02c7-738c-b193-e5534d40e83e", "title": "Milkomeda: colliding galaxies or how to repurpose security checks across domains", "url": "https://nebelwelt.net/blog/2019/0102-Milkomeda.html", "published_at": "2019-01-02T21:18:00+00:00" }, { "id": "01a087ad-02c8-70aa-8881-89871453e880", "title": "Automating data-only attacks through Block Oriented Programming (BOP)", "url": "https://nebelwelt.net/blog/2018/1231-BOP.html", "published_at": "2018-12-31T18:40:00+00:00" }, { "id": "01a087ad-02c8-70aa-8881-898715060ce0", "title": "A journey on evaluating Control-Flow Integrity (CFI): LLVM-CFI versus RAP", "url": "https://nebelwelt.net/blog/2018/1226-CFIeval.html", "published_at": "2018-12-27T04:07:00+00:00" }, { "id": "01a087ad-02c8-70aa-8881-898715b47aca", "title": "How not to alienate your reviewers, aka writing a decent rebuttal", "url": "https://nebelwelt.net/blog/2018/0704-rebuttal.html", "published_at": "2018-07-04T22:31:00+00:00" }, { "id": "01a087ad-02c8-70aa-8881-8987160cbdd7", "title": "NSF TTP Proposal: Prototype Shepherding", "url": "https://nebelwelt.net/blog/2018/0513-NSFTTP-prototype-shepherding.html", "published_at": "2018-05-13T21:05:00+00:00" }, { "id": "01a087ad-02c8-70aa-8881-898716491711", "title": "The PC Experience", "url": "https://nebelwelt.net/blog/2018/0303-PCexperience.html", "published_at": "2018-03-04T00:03:00+00:00" }, { "id": "01a087ad-02c8-70aa-8881-8987164ee36d", "title": "Raising the BAR at NDSS 2018", "url": "https://nebelwelt.net/blog/2018/0221-raising_the_bar.html", "published_at": "2018-02-21T19:03:00+00:00" }, { "id": "01a087ad-02c8-70aa-8881-8987172a7e85", "title": "Roundtable on rigor in experimentation", "url": "https://nebelwelt.net/blog/2017/0814-experimentation-rigor.html", "published_at": "2017-08-14T21:52:00+00:00" }, { "id": "01a087ad-02c8-70aa-8881-898717a4b63b", "title": "Mitigations: Completeness/Effectiveness vs Performance", "url": "https://nebelwelt.net/blog/2017/0707-mitigation-panel.html", "published_at": "2017-07-07T13:38:00+00:00" }, { "id": "01a087ad-02c8-70aa-8881-898717c3dcc9", "title": "SyScan+360 in Seattle", "url": "https://nebelwelt.net/blog/2017/0531-syscan360.html", "published_at": "2017-06-01T02:15:00+00:00" }, { "id": "01a087ad-02c8-70aa-8881-8987181a5034", "title": "Oakland'17, the IEEE Symposium on Security and Privacy", "url": "https://nebelwelt.net/blog/2017/0524-oakland.html", "published_at": "2017-05-25T01:12:00+00:00" }, { "id": "01a087ad-02c8-70aa-8881-89871825b3c0", "title": "AsiaCCS'17 in Abu Dhabi", "url": "https://nebelwelt.net/blog/2017/0410-asiaccs.html", "published_at": "2017-04-10T14:09:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8af830076", "title": "33C3 CTF: Fun times", "url": "https://nebelwelt.net/blog/2016/1230-33C3-CTF.html", "published_at": "2016-12-30T20:39:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8afa0d65b", "title": "TUM CTF: boot2brainfuck", "url": "https://nebelwelt.net/blog/2016/1002-TUMCCTF-boot2brainfuck.html", "published_at": "2016-10-02T16:39:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b0989d55", "title": "AMD SEV attack surface: a tale of too much trust", "url": "https://nebelwelt.net/blog/2016/0922-AMD-SEV-attack-surface.html", "published_at": "2016-09-22T16:28:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b0eb08fd", "title": "Control-Flow Integrity: An Introduction", "url": "https://nebelwelt.net/blog/2016/0913-ControlFlowIntegrity.html", "published_at": "2016-09-13T20:28:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b1b9f6e5", "title": "AsiaCCS and China", "url": "https://nebelwelt.net/blog/2016/0621-AsiaCCS.html", "published_at": "2016-06-21T20:56:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b230e27b", "title": "Oakland from a system security perspective", "url": "https://nebelwelt.net/blog/2016/0620-Oakland.html", "published_at": "2016-06-20T12:56:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b30441ef", "title": "Trend Micro CTF: base64 (crypto 500)", "url": "https://nebelwelt.net/blog/2015/0926-trendmicro-base64.html", "published_at": "2015-09-26T16:00:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b3c31906", "title": "CSAW: sharpturn", "url": "https://nebelwelt.net/blog/2015/0918-csaw-sharpturn.html", "published_at": "2015-09-19T16:00:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b46561bc", "title": "PLAID: pnguncorrupt", "url": "https://nebelwelt.net/blog/2015/0418-plaid-pnguncorrupt.html", "published_at": "2015-04-18T06:00:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b4cd5897", "title": "0CTF: treasure", "url": "https://nebelwelt.net/blog/2015/0330-0ctf-treasure.html", "published_at": "2015-03-30T06:00:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b570771a", "title": "Reversing JS email malware", "url": "https://nebelwelt.net/blog/2015/0208-EMail-Malware.html", "published_at": "2015-02-08T15:00:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b5a1b194", "title": "31c3 - A New Dawn", "url": "https://nebelwelt.net/blog/2014/1230-31c3.html", "published_at": "2014-12-30T21:00:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b68dd6bc", "title": "Ghost in the Shellcode Teaser 2015: Lost To Time", "url": "https://nebelwelt.net/blog/2014/1213-GitS-LostToTime.html", "published_at": "2014-12-14T00:39:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b75e4976", "title": "On differences between the CFI, CPS, and CPI properties", "url": "https://nebelwelt.net/blog/2014/1007-CFICPSCPIdiffs.html", "published_at": "2014-10-07T18:09:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b82a08d6", "title": "'sploits or having fun with the heap, stack, and format strings", "url": "https://nebelwelt.net/blog/2014/0930-sploits.html", "published_at": "2014-09-30T16:09:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b82a9275", "title": "Jumping monkeys or how to reach a technical point of contact at an online or tech company", "url": "https://nebelwelt.net/blog/2014/0827-jumping_monkeys.html", "published_at": "2014-08-27T14:09:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b8b33a64", "title": "On collaborative (remote) paper writing", "url": "https://nebelwelt.net/blog/2014/0504-collaborative-writing.html", "published_at": "2014-05-04T23:09:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b91f9cc0", "title": "SyScan, day 2", "url": "https://nebelwelt.net/blog/2014/0404-SyScan14-day2.html", "published_at": "2014-04-05T01:56:00+00:00" }, { "id": "01a087ad-02c9-705f-9e15-95e8b9b54fe2", "title": "SyScan, day 1", "url": "https://nebelwelt.net/blog/2014/0403-SyScan14-day1.html", "published_at": "2014-04-04T01:56:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6bfd1b8c5", "title": "Two crazy days in Tokyo", "url": "https://nebelwelt.net/blog/2014/0329-Two-crazy-days-in-Tokyo.html", "published_at": "2014-03-29T21:54:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c0b32932", "title": "Surviving your first non-virtual program committee meeting", "url": "https://nebelwelt.net/blog/2014/0123-pc_meetings.html", "published_at": "2014-01-23T05:00:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c0d3a122", "title": "A walkthrough for a difficult point and click adventure or deleting a GApps domain and all Google services", "url": "https://nebelwelt.net/blog/2014/0122-leaving-the-cloud2.html", "published_at": "2014-01-22T05:00:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c16744b4", "title": "Having phun with Symbolic Execution (SE)", "url": "https://nebelwelt.net/blog/2014/0114-having_phun_with_SE.html", "published_at": "2014-01-14T05:00:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c1f1c8e3", "title": "30c3, a log of the 30st chaos communication congress", "url": "https://nebelwelt.net/blog/2013/1230-30c3-a_yearly_hackers_gettogether.html", "published_at": "2013-12-30T05:00:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c2451334", "title": "How to choose secure passwords for insecure websites", "url": "https://nebelwelt.net/blog/2013/1118-on-passwords.html", "published_at": "2013-11-18T05:00:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c28436e4", "title": "The day (or week) I left the Google cloud", "url": "https://nebelwelt.net/blog/2013/1005-leaving-the-cloud.html", "published_at": "2013-10-05T04:00:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c2ef2809", "title": "Gasland: worst documentary of all time?", "url": "https://nebelwelt.net/blog/2013/0813-gasland-worst-documentary-of-all-time.html", "published_at": "2013-08-13T19:14:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c337a57e", "title": "FreedomPop Overdrive: first thoughts", "url": "https://nebelwelt.net/blog/2013/0508-freedompop-overdrive-first-thoughts.html", "published_at": "2013-05-08T09:38:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c3b1eb4a", "title": "Visiting the capital of the United States: Washington", "url": "https://nebelwelt.net/blog/2013/0415-visiting-the-capital-of-the-united-states-washington.html", "published_at": "2013-04-16T01:51:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c43a46da", "title": "A couple of days in Carmel and Big Sur", "url": "https://nebelwelt.net/blog/2013/0407-a-couple-of-days-in-carmel-and-big-sur.html", "published_at": "2013-04-07T09:16:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c4f6b4cb", "title": "Joaquin Miller park", "url": "https://nebelwelt.net/blog/2013/0330-joaquin-miller-park.html", "published_at": "2013-03-31T00:28:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c5b455df", "title": "Angel Island", "url": "https://nebelwelt.net/blog/2013/0323-angel-island.html", "published_at": "2013-03-24T00:14:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c5c2d9cd", "title": "WarGames in memory: shall we play a game?", "url": "https://nebelwelt.net/blog/2013/0312-wargames-in-memory-shall-we-play-a-game.html", "published_at": "2013-03-12T09:53:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c5ff494e", "title": "Dynamite and explosions galore: Point Pinole Regional Shoreline", "url": "https://nebelwelt.net/blog/2013/0310-dynamite-and-explosions-galore-point-pinole-regional-shoreline.html", "published_at": "2013-03-10T23:11:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c61fe630", "title": "Wildcat Canyon double hike", "url": "https://nebelwelt.net/blog/2013/0309-wildcat-canyon-double-hike.html", "published_at": "2013-03-10T02:15:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c6f48e93", "title": "Tilden regional park: Vollmer peak", "url": "https://nebelwelt.net/blog/2013/0224-tilden-regional-park-vollmer-peak.html", "published_at": "2013-02-25T01:04:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c78cd798", "title": "Robots, wildlife and bioinspiration", "url": "https://nebelwelt.net/blog/2013/0221-robots-wildlife-and-bioinspiration.html", "published_at": "2013-02-21T11:32:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c7bceeff", "title": "Hiking and Geo Caching along the Miller/Knox Regional Shoreline / the Keller Beach Park", "url": "https://nebelwelt.net/blog/2013/0217-hiking-and-geo-caching-along-the-millerknox-regional-shoreline-the-keller-beach-park.html", "published_at": "2013-02-18T00:01:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c8a66700", "title": "All paths lead to Rome: POPL and PPREW from a syssec perspective", "url": "https://nebelwelt.net/blog/2013/0213-all-paths-lead-to-rome-popl-and-pprew-from-a-syssec-perspective.html", "published_at": "2013-02-13T22:28:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c8c09634", "title": "Golden Gate bridge, Point Bonita lighthouse and light hike around the Rodeo lagoon", "url": "https://nebelwelt.net/blog/2013/0210-golden-gate-bridge-point-bonita-lighthouse-and-light-hike-around-the-rodeo-lagoon.html", "published_at": "2013-02-10T22:19:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c8d14f99", "title": "Russian River Canoedeling", "url": "https://nebelwelt.net/blog/2012/1006-russian-river-canoedeling.html", "published_at": "2012-10-07T02:11:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c9587c62", "title": "Muir Woods hike", "url": "https://nebelwelt.net/blog/2012/1005-muir-woods-hike.html", "published_at": "2012-10-06T01:44:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c964fed7", "title": "Lake Anza stroll", "url": "https://nebelwelt.net/blog/2012/0930-lake-anza-stroll.html", "published_at": "2012-09-30T23:13:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6c99aa142", "title": "PhD: expectations and reality", "url": "https://nebelwelt.net/blog/2012/0921-phd-expectations-and-reality.html", "published_at": "2012-09-21T09:37:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6ca50278d", "title": "Bootstrapping at UC Berkeley", "url": "https://nebelwelt.net/blog/2012/0917-bootstrapping-at-uc-berkeley.html", "published_at": "2012-09-17T21:51:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6cab54ff2", "title": "Wildcat Canyon hike", "url": "https://nebelwelt.net/blog/2012/0915-wildcat-canyon-hike.html", "published_at": "2012-09-16T01:31:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6cb4d7905", "title": "Mount Diablo State Park", "url": "https://nebelwelt.net/blog/2012/0913-mount-diablo-state-park.html", "published_at": "2012-09-14T01:18:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6cc36769a", "title": "Point Reyes National Seashore", "url": "https://nebelwelt.net/blog/2012/0911-point-reyes-national-seashore.html", "published_at": "2012-09-11T22:30:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6cc727e22", "title": "Black Diamond Mines Regional Reserve", "url": "https://nebelwelt.net/blog/2012/0908-black-diamond-mines-regional-reserve.html", "published_at": "2012-09-09T01:43:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6cd608f4f", "title": "An expats start as a security postdoc at UC Berkeley", "url": "https://nebelwelt.net/blog/2012/0902-an-expats-start-as-a-security-postdoc-at-uc-berkeley.html", "published_at": "2012-09-02T23:10:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6cd76557f", "title": "Hard data on YouPorn", "url": "https://nebelwelt.net/blog/2012/0222-hard-data-on-youporn.html", "published_at": "2012-02-22T22:54:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6ce3286b5", "title": "28c3 - 28th Chaos Communication Congress & Berlin Sides or a tough week in Berlin", "url": "https://nebelwelt.net/blog/2012/0109-28c3-28th-chaos-communication-congress.html", "published_at": "2012-01-09T18:59:00+00:00" }, { "id": "01a087ad-02ca-700f-b020-79b6cedc920b", "title": "Academic careers or how to become a professor.", "url": "https://nebelwelt.net/blog/2011/0512-academic-careers-or-how-to-become-a-professor.html", "published_at": "2011-05-12T09:15:00+00:00" } ] posts Claim your blog
Back to nebelwelt.net
Blog · corpus.blog/blogs/nebelwelt.net/posts

nebelwelt.net

nebelwelt.net

2026

x402 or How to Race Against the Blockchainoriginal ↗
17 Sept 2026
VulGenie: Mining Security Patches to Find API Violation Bugsoriginal ↗
17 Sept 2026
CrossFit: Demystifying VM Callback Bugsoriginal ↗
16 Sept 2026
PrivacyShield: Privacy-aware Tracking Protectionoriginal ↗
15 Sept 2026
Exploiting Android Apps with Counterfeit Artoriginal ↗
15 Sept 2026
Grape: Squeezing Juicy Variant Bugs Out of Modern Browsersoriginal ↗
13 Sept 2026
SymCTS: Untangling Symbolic Execution and Fuzzingoriginal ↗
11 Sept 2026
IEEE Symposium on Security and Privacy (Oakland) '26original ↗
21 May 2026
TÄMU: Emulating Trusted Applicationsoriginal ↗
20 May 2026
The AIpocalypse or how LLM-based exploitation is the new normaloriginal ↗
21 Apr 2026
Sysyphuzz: the pressure for more coverageoriginal ↗
27 Feb 2026

2025

39c3: Master reset in Hamburgoriginal ↗
31 Dec 2025
Not To Be Trusted - A Fiasco in Android TEEsoriginal ↗
28 Dec 2025
AISec and the exploration of the Chinese souloriginal ↗
30 Nov 2025
Droidot: Vulnerable Native Libraries on Androidoriginal ↗
13 Aug 2025
NASS: Fuzzing Native Android System Servicesoriginal ↗
13 Aug 2025
SuRI'25 on Security, Systems, and Formal Methodsoriginal ↗
13 Jun 2025
NDSS25: Exploring San Diegooriginal ↗
27 Feb 2025
Type++: A Type-Safe C++ Dialectoriginal ↗
27 Feb 2025
Dumpling: dumping fine-grained execution stateoriginal ↗
27 Feb 2025
QMSan: discovering uninitialized memory errors in binariesoriginal ↗
27 Feb 2025
Truman: discovering hypervisor bugs through virtual device modelsoriginal ↗
27 Feb 2025
Auto-tagging SPAM emailsoriginal ↗
28 Jan 2025

2024

38c3: Hutzelwutze in Hamburgoriginal ↗
30 Dec 2024
From Fuzzing to Frameworks: 2024 Research Highlightsoriginal ↗
27 Dec 2024
RIP Niklaus Wirthoriginal ↗
5 Jan 2024

2023

37c3: Chaos returning to Hamburgoriginal ↗
31 Dec 2023

2022

Writing (successful) ERC grants in Europeoriginal ↗
6 Sept 2022
Second factor on VPNs considered harmfuloriginal ↗
12 Jul 2022

2021

PhD at EPFL, in Europeoriginal ↗
22 Jan 2021

2019

Positive reviewing in software securityoriginal ↗
7 Dec 2019
Expedia: from software bug to customer service nightmare, a modern Odysseyoriginal ↗
2 Jul 2019
How to install a Canon MF633Cdw on a modern Debianoriginal ↗
10 Jun 2019
The Fuzzing Hype-Train: How Random Testing Triggers Thousands of Crashesoriginal ↗
1 Apr 2019
SMoTherSpectre: transient execution attacks through port contentionoriginal ↗
6 Mar 2019
Milkomeda: colliding galaxies or how to repurpose security checks across domainsoriginal ↗
2 Jan 2019

2018

Automating data-only attacks through Block Oriented Programming (BOP)original ↗
31 Dec 2018
A journey on evaluating Control-Flow Integrity (CFI): LLVM-CFI versus RAPoriginal ↗
27 Dec 2018
How not to alienate your reviewers, aka writing a decent rebuttaloriginal ↗
4 Jul 2018
NSF TTP Proposal: Prototype Shepherdingoriginal ↗
13 May 2018
The PC Experienceoriginal ↗
4 Mar 2018
Raising the BAR at NDSS 2018original ↗
21 Feb 2018

2017

Roundtable on rigor in experimentationoriginal ↗
14 Aug 2017
Mitigations: Completeness/Effectiveness vs Performanceoriginal ↗
7 Jul 2017
SyScan+360 in Seattleoriginal ↗
1 Jun 2017
Oakland'17, the IEEE Symposium on Security and Privacyoriginal ↗
25 May 2017
AsiaCCS'17 in Abu Dhabioriginal ↗
10 Apr 2017

2016

33C3 CTF: Fun timesoriginal ↗
30 Dec 2016
TUM CTF: boot2brainfuckoriginal ↗
2 Oct 2016
AMD SEV attack surface: a tale of too much trustoriginal ↗
22 Sept 2016
Control-Flow Integrity: An Introductionoriginal ↗
13 Sept 2016
AsiaCCS and Chinaoriginal ↗
21 Jun 2016
Oakland from a system security perspectiveoriginal ↗
20 Jun 2016

2015

Trend Micro CTF: base64 (crypto 500)original ↗
26 Sept 2015
CSAW: sharpturnoriginal ↗
19 Sept 2015
PLAID: pnguncorruptoriginal ↗
18 Apr 2015
0CTF: treasureoriginal ↗
30 Mar 2015
Reversing JS email malwareoriginal ↗
8 Feb 2015

2014

31c3 - A New Dawnoriginal ↗
30 Dec 2014
Ghost in the Shellcode Teaser 2015: Lost To Timeoriginal ↗
14 Dec 2014
On differences between the CFI, CPS, and CPI propertiesoriginal ↗
7 Oct 2014
'sploits or having fun with the heap, stack, and format stringsoriginal ↗
30 Sept 2014
Jumping monkeys or how to reach a technical point of contact at an online or tech companyoriginal ↗
27 Aug 2014
On collaborative (remote) paper writingoriginal ↗
4 May 2014
SyScan, day 2original ↗
5 Apr 2014
SyScan, day 1original ↗
4 Apr 2014
Two crazy days in Tokyooriginal ↗
29 Mar 2014
Surviving your first non-virtual program committee meetingoriginal ↗
23 Jan 2014
A walkthrough for a difficult point and click adventure or deleting a GApps domain and all Google servicesoriginal ↗
22 Jan 2014
Having phun with Symbolic Execution (SE)original ↗
14 Jan 2014

2013

30c3, a log of the 30st chaos communication congressoriginal ↗
30 Dec 2013
How to choose secure passwords for insecure websitesoriginal ↗
18 Nov 2013
The day (or week) I left the Google cloudoriginal ↗
5 Oct 2013
Gasland: worst documentary of all time?original ↗
13 Aug 2013
FreedomPop Overdrive: first thoughtsoriginal ↗
8 May 2013
Visiting the capital of the United States: Washingtonoriginal ↗
16 Apr 2013
A couple of days in Carmel and Big Suroriginal ↗
7 Apr 2013
Joaquin Miller parkoriginal ↗
31 Mar 2013
Angel Islandoriginal ↗
24 Mar 2013
WarGames in memory: shall we play a game?original ↗
12 Mar 2013
Dynamite and explosions galore: Point Pinole Regional Shorelineoriginal ↗
10 Mar 2013
Wildcat Canyon double hikeoriginal ↗
10 Mar 2013
Tilden regional park: Vollmer peakoriginal ↗
25 Feb 2013
Robots, wildlife and bioinspirationoriginal ↗
21 Feb 2013
Hiking and Geo Caching along the Miller/Knox Regional Shoreline / the Keller Beach Parkoriginal ↗
18 Feb 2013
All paths lead to Rome: POPL and PPREW from a syssec perspectiveoriginal ↗
13 Feb 2013
Golden Gate bridge, Point Bonita lighthouse and light hike around the Rodeo lagoonoriginal ↗
10 Feb 2013

2012

Russian River Canoedelingoriginal ↗
7 Oct 2012
Muir Woods hikeoriginal ↗
6 Oct 2012
Lake Anza strolloriginal ↗
30 Sept 2012
PhD: expectations and realityoriginal ↗
21 Sept 2012
Bootstrapping at UC Berkeleyoriginal ↗
17 Sept 2012
Wildcat Canyon hikeoriginal ↗
16 Sept 2012
Mount Diablo State Parkoriginal ↗
14 Sept 2012
Point Reyes National Seashoreoriginal ↗
11 Sept 2012
Black Diamond Mines Regional Reserveoriginal ↗
9 Sept 2012
An expats start as a security postdoc at UC Berkeleyoriginal ↗
2 Sept 2012
Hard data on YouPornoriginal ↗
22 Feb 2012
28c3 - 28th Chaos Communication Congress & Berlin Sides or a tough week in Berlinoriginal ↗
9 Jan 2012

2011

Academic careers or how to become a professor.original ↗
12 May 2011
Next