Perri Adams
@perribus
Followers
6,551
Following
998
Media
90
Statuses
2,020
Special Assistant to the Director @DARPA • AIxCC • Adj Professor @SAISHopkins • Prev running @DEFCON Capture the Flag (CTF) • @RPISEC Alumna • Opinions mine
From one Washington to another
Joined May 2011
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
Arsenal
• 585022 Tweets
#خلصوا_صفقات_الهلال2
• 279009 Tweets
アニサマ
• 223864 Tweets
ارسنال
• 206061 Tweets
haechan
• 173226 Tweets
Watch Sant Rampal Ji YouTube
• 146981 Tweets
Rice
• 144531 Tweets
#พรชีวันตอนจบ
• 112719 Tweets
Brighton
• 100591 Tweets
Ticketmaster
• 95691 Tweets
Saka
• 76530 Tweets
Gameday
• 46060 Tweets
Qoo10
• 37652 Tweets
ポムの樹
• 36577 Tweets
Joao Pedro
• 33135 Tweets
#ARSBHA
• 32519 Tweets
#SixTONESANN
• 31266 Tweets
ジェシー
• 30395 Tweets
Creamline
• 28859 Tweets
すいちゃん
• 21082 Tweets
マッサマン
• 18149 Tweets
#Venue101
• 17682 Tweets
Veltman
• 14747 Tweets
アーセナル
• 13957 Tweets
ブライトン
• 10872 Tweets
Chris Kavanagh
• 10852 Tweets
The kids are alright
Proving once again that Minecraft exploits are fundamentally more interesting than the ones targeting software people actually care about (and definitely being better for civil society):
3
79
780
6
274
3K
Over the years Sophia became one of my closest friends. I’m not at the point in grief to say words that would come close to doing her justice. She touched so many. I love her and miss her.
Statement on the passing of Sophia d’Antoine, CEO and founder of Margin Research
@Calaquendi44
0
122
345
7
14
222
Some personal? professional? news: I'm extremely excited to set sail with the Nautilus Institute as we embark on our voyage as the newest organizers of
@defcon
CTF.
14
19
168
Great blog post on exploiting Qualcomm Secure Execution Environment (QSEE) on Android
The discussion of mitigations and general attack pattern pairs nicely with this ‘17 NDSS paper “BOOMERANG: Exploiting the Semantic Gap in Trusted Execution Environments”
New blog post :)
A pretty unique Android vulnerability I found, which allowed me to exploit the kernel by using the TrustZone. This helped me bypass all kernel security mitigations and create a super reliable exploit.
29
273
770
2
40
129
Thanks to all of the
@defcon
CTF players, not just for all of your hard work but for your patience & understanding as we worked through our infra issues, which were significant this year. I’m so grateful to the entire CTF community & looking forward to a smoother CTF next year.
3
10
117
A few links for getting into CTF:
from
@shellphish
has lectures and challenges with great interactive environments—a fantastic set of resources.
In addition, highly recommend from
@PlaidCTF
and from
@RPISEC
I asked DEF CON CTF organizer Perri Adams about the make-up of a good capture-the-flag player and for recommendations for someone now getting started
@perribus
7
31
170
2
34
110
Nothing scarier when you’re sitting in the dunk chair than
@RachelTobac
on mic egging them on
So impressed w her,
@comathematician
,
@BlueTeamVillage
@BlackInCyberCo1
@aivillage_dc
@wisporg
who come to
@defcon
and bring people together. Proud to be part of this community.
Great question
@t3dotgg
! Many people have been asking and it comes down to three simple steps:
1. Go to
@defcon
2. Pick up your free raffle ticket at
@wisporg
or
@BlackInCyberCo1
before 1:30p today
3. Come to the Sahara Azilo pool today at 8p (I am told there are tacos)
0
7
23
4
9
112
Statement from
@RPISEC
.
1
9
85
Unfortunately, I left DEF CON with one souvenir I was hoping to avoid. Heads-up for the folks I saw during and after the CTF.
13
8
82
@edbutler2
@jonathandata1
Hey, Ed, the folks in your replies are right. The app is absolutely suspect but Jonathan’s claims go far beyond anything there’s evidence for and he’s demonstrated that he doesn’t understand the technology. Jonathan is a known charlatan to computer security experts.
0
3
76
Delayed 3 weeks due to COVID, but had a fantastic birthday. Grateful to have such amazing friends and colleagues.
7
0
72
Grabbed a copy of Rootkits and Bootkits from
@matrosov
’s talk at
#LABScon22
but only had it signed by 2/3 authors. Luckily, I know where to find
@sergeybratus
…
3
7
72
I don’t understand how people code live on video (eg
@gamozolabs
) I’ve reintroduced the same bug three times in the last two days and each instance took 20 minutes of debugging to find out I’d…unfixed the same thing as before
7
0
68
I’m hoping to follow in the footsteps of PMs like
@dotMudge
who created Cyber Fast Track, Mike Walker who ran DARPA’s Cyber Grand Challenge, Dustin Fraze who started DARPA CHESS, & others. I have so much respect & gratitude for them for making the research I’d like to do possible
3
3
61
Great example of how insidious modern vulnerabilities can be in complex software.
Chrome: Design flaw in Synchronous Mojo message handling introduces unexpected reentrancy and allows for multiple UAFs
0
25
123
0
10
59
“The Biden-Harris Administration today launched a major two-year competition that will use artificial intelligence (AI) to protect the United States’ most important software, such as code that helps run the internet and our critical infrastructure.”
0
20
57
Thank you to Jeff &
@BlackHatEvents
for letting us announce AIxCC during the opening of this year’s Black Hat
Now for Part 2! I’ll be at
@defcon
Track 2 at 2:30 speaking w/
@dwizzzleMSFT
@vijaybolina
@argvee
@omkhar_openssf
Matt Knight (
@OpenAI
) & Michael Sellitto (
@AnthropicAI
)
3
10
56
DEF CON CTF Qualifiers are in two weeks! The shells are waiting for you 🐚
2
14
58
DEFCON AIxCC in Las Vegas today ✈️USENIX WOOT in Philly tomorrow
With less than a week left, here's a brief summary on what to expect from WOOT:
- 18 amazing talks on offensive security (single track) 🤩
- a galvanizing keynote by
@perribus
on the relationship between white hat hackers and AI 😍
- a room filled with inspiring people 🤯
1
17
31
1
3
52
DEF CON CTF kicks of at 11! Stop by the CTF room to see the World Series of hacking competitions. The 15 teams you see on the floor qualified out of 1200 teams from around the world & represent some of the best of the best at binary exploitation, reversing, web hacking, and more.
1
7
49
Congrats to all the players who solved Crypto Chall and to everyone who worked so hard on it! It got released early so I had time to writeup the solution. Source code and my exploit are also in the repo:
My baby, now released to the world.
Nota bene, this is a binary exploitation & cryptography challenge and is in no way associated with this so-called 'cryptocurrency' fad
0
1
33
1
12
49
The role of DARPA PM is this unique, unparalleled opportunity in which you’re afforded a fixed tenure (3-5 years) to create and direct research programs that push the bounds of current science. It’s quite frankly one of the coolest positions I’ll ever have.
1
0
47
This is why the AIxCC scoring algorithm penalizes false positives and requires teams submit proof of vulnerability in the form of inputs that exercise the flawed code and demonstrate the issue.
1
6
47
Today I’ll be at IEEE Security and Privacy
@IEEESSP
with Andrew Carney from
@ARPAHealth
to discuss AIxCC. There’s so much fantastic research being presented on how AI can be used for security, we’re excited to join the fun 🎉
5
9
46
So excited for this —
@Zardus
,
@TheConnorNelson
, et al. have built something groundbreaking in . Learning to write an exploit should be available to all — and now you’ll be able to *graduate* to the next level of pwn at
@DEFCON
Learn more at 4:30p today!!
Thrilled to join
@Zardus
in announcing DEF CON Academy on Saturday at 1630. Wouldn't have been possible without
@thedarktangent
, a fantastic co-conspirator in this effort.
1
5
27
2
18
46
Absolutely adored having the opportunity to talk to
@ryanaraine
about how formative CTF and
@RPISEC
has been for me.
Coming up next on the pod: The incomparable Perri Adams (
@perribus
) on the value of CTFs and DARPA's new $20M AI Cyber Challenge
#SecurityConversations
#AIxCC
A snippet 👇
3
5
39
3
2
45
Love the excitement for fixing real vulnerabilities 🎉🎉🎉
And nothing says critical code like SQLite which is in your browser, phone, computer, car, electric grid, and most likely the airplane that took you home from
@defcon
…
THAT’S WHAT WE’RE TALKING ABOUT!!
🗣️🗣️🗣️
@TeamAtlanta24
@DARPA
@defcon
#GaTech
#WeCanDoThat
#vulnerability
#zeroday
1
4
23
1
9
43
A number of Sophia’s friends had this tattooed today. Her impact on those around her is permanent and everlasting.
0
1
43
Pineapple cake here at
@Nautilus_CTF
headquarters to celebrate a successful beginning to
@defcon
quals.
1
3
40
AIxCC couldn’t have found better conference friends than the wonderful folks
@defcon
So many more details on ~everything~ coming soon!
(pc
@Grifter801
)
1
6
40
Thrilled at the strong showing by university students in AIxCC. Several university-led teams like 42-b3yond-6ug,
@TeamAtlanta24
&
@shellphish
are going to finals!
As below, there’s been a lot of inter-school collaboration. Fantastic teamwork across our academic institutions!
It's a great honor to collaborate with my talented and hardworking current and former students, friends, and colleagues on the AIxCC journey. A huge shoutout to team 42-b3yond-6ug and a big win for Northwestern, CU-Boulder, Utah, Waterloo, and UNH. Well deserved!
2
9
52
0
7
41
I'm know I'm late but Chrome's MiraclePtr effort is really impressive - seems like it's going to kill a significant swathe of sandbox UAFs. The huge codebase rewrite & the performance impact show that some places are actually willing to make tradeoffs for security
1
2
39
Absolutely delighted to see the AI Cyber Challenge emphasized as a key point of the AI Executive Order.
Today, I signed an Executive Order that is the most significant action any government has ever taken on AI safety, security, and trust.
I am determined to do everything in my power to promote and demand responsible innovation.
4K
2K
11K
1
7
37
It was a pleasure to join the Open Source Software Summit this week and speak about the AI Cyber Challenge, and how emerging technologies like AI can be used to combat cybersecurity threats.
For the latest on AIxCC:
0
7
38
It’s an honor to be nominated in the presence of so many talented individuals. I’ve had the privilege of knowing a number of the other nominees, and have seen their great work and dedication to the space.
We're thrilled to announce the nominees for the 2024
#CyberScoop50
Awards! These cybersecurity trailblazers are not just combating today's threats but are also innovating to safeguard our future. Their dedication keeps our global networks secure and resilient. Show your support
0
6
16
1
9
38
All of the
@livectf
broadcasts from this year's
@defcon
CTF Qualifiers are up and can be watched here:
Great way for beginners to see how CTF players compete, with challenges easier than the ones usually found in DEF CON CTF
And that's a wrap! All LiveCTF challenges for the DEF CON CTF Quals 2023 are complete, thanks for joining us this year.
Join our final broadcast where we will recap all the results:
0
2
15
0
10
35
You can watch the AI Cyber Challenge Update here! Lots of fun stuff, from an additional $4 million in Semifinal Prizes to the first release of our Scoring Algorithm and Exemplar Challenge -- and it wouldn't be R&D without some schedule changes too ;)
6
18
34
