Sign in

Jay Bosamiya

@jaybosamiya.bsky.social
164 followers 367 following 49 posts

🦊 Software security researcher. Making secure software the natural choice. PhD from CMU. CTFer (PPP). jaybosamiya.com

PostsRepliesMedia
Reposted by Jay Bosamiya
waffle .-. @waffle.pet · 25/08/2026
blog.ihatereality.space/0C-never-type/
blog.ihatereality.space
I stabilized never type | I hate reality
yeah
2122737
Reposted by Jay Bosamiya
Eri!!!! :03 ΘΔ @mandateofheaven.bsky.social · 07/05/2026
I can't stop thinking about this video since I saw it last night
175188736786
Reposted by Jay Bosamiya
rain 🌦️ @sunshowers.io · 18/04/2026
"substituting X for Y" is an English construction that _always_ trips me up
2171
Reposted by Jay Bosamiya
absolute horses @jcoglan.com · 17/04/2026
you know you've been computering for too long when you can recognise what this is
61683116
Reposted by Jay Bosamiya
Sam Rose @samwho.dev · 14/04/2026
The sound this thing makes is so cool. What a clever idea. youtu.be/E1BLGpE5zH0?...
youtu.be
Air Powered Segment Display: 3D Printed Microfluidic RAM?
YouTube video by soiboi soft
2235
Reposted by Jay Bosamiya
Minas Karamanis @minaskar.bsky.social · 30/03/2026
Hey, I wrote a thing about AI in astrophysics ergosphere.blog/posts/the-ma...
ergosphere.blog
The machines are fine. I'm worried about us.
On AI agents, grunt work, and the part of science that isn't replaceable.
1101780530
Reposted by Jay Bosamiya
Benevolent Bureau of Birds @bbbirds.org · 07/03/2026
BIRDS BIRDS BIRDS BIRDS! Quals: May 22-24, 2026 Finals: August 7-9, 2026 bbbirds.org www.defcon.org/html/links/d...
042
Reposted by Jay Bosamiya
Calle Svensson @zetatwo.bsky.social · 03/03/2026
Happy to announce that @livectf.bsky.social will be a part of this next generation of DEF CON CTF. Looking forward to work with BBB on bringing our new crazy ideas on CTF as a spectator sport to life!
052
Reposted by Jay Bosamiya
DEF CON @defcon.bsky.social · 03/03/2026
Please welcome the #defcon34 #CTF organizers, Benevolent Bureau of Birds! You can sample their wares in the #DC34CTF Qualifier Round, May 22-24, 2026. The Birds are online at bbbirds.org. Info about our legendary CTF: www.defcon.org/html/links/d.... We hope we'll see you in the arena.
Benevolent Bureau of Birds logo
0188
Reposted by Jay Bosamiya
Zion Leonahenahe Basque @mahal0z.bsky.social · 31/12/2025
Happy New Year's Eve! Our tool for placing decompilation (symbols, source, types) into the debugger (gdb) is now officially integrated into pwndbg! You will have access to it (decomp2dbg) in your next default install of pwndbg 🎉 Happy hacking:
github.com
Reimplement decompiler integration by k4lizen · Pull Request #3401 · pwndbg/pwndbg
Okay this is a chonker. See the docs/tutorials/decompiler-integration.md for some overview. And docs/assets/caps/decomp_integration_ex.png for an image example vs previous implementation pros we d...
062
Jay Bosamiya @jaybosamiya.bsky.social · 31/12/2025
Happy New Year’s Eve!
Well, my year started about a year ago.
010
Reposted by Jay Bosamiya
Sam Rose @samwho.dev · 16/09/2025
This video is a pedagogical masterpiece. I am speechless. I can’t even begin to imagine the effort and love that went into this. youtu.be/BFld4EBO2RE?...
youtu.be
Painting a Landscape with Mathematics
YouTube video by Inigo Quilez
0225
Jay Bosamiya @jaybosamiya.bsky.social · 15/09/2025
Just saw #TheLongWalk. Intense and gripping. Would recommend Fair warning though, it is _violent_
020
Jay Bosamiya @jaybosamiya.bsky.social · 06/09/2025
I am once again extolling the virtues of creduce. It has saved me so much debugging time in so many scenarios. Doesn’t even matter if what I’m reducing is not C, it just munches through it and simplifies inputs like crazy
110
Reposted by Jay Bosamiya
qntm @qntm.org · 01/09/2025
Software developer cleared of murder after defence lawyer proves victim invoked undefined behaviour
214923
Reposted by Jay Bosamiya
Amal El-Mohtar @amalelmohtar.com · 31/08/2025
I simply have not yet found writing of @vajra.me’s that I did not find nourishing & moving to action & change, & this essay is no exception. “There is such a thing as the least you can do, and too many people do not bother to find out what that is, much less exceed it.”
vajra.me
Persons of Story
A review of KATHAPURUSHAN (1995), and some thoughts on personhood, of story and otherwise.
0233
Reposted by Jay Bosamiya
nat alison @tesseralis.site · 28/08/2025
i think this is how i finally learn how to make music
310911
Reposted by Jay Bosamiya
Jay Bosamiya @jaybosamiya.bsky.social · 25/08/2025
There’s a beautiful kinetic typography video of the quote that is etched in my mind (partly since I rewatch it every couple of years): vimeo.com/24715531
vimeo.com
Ira Glass on Storytelling
UPDATE 2021: I've been told that this video has hit Vimeo's upper bandwidth limit and so I've had to find ways to limit the bleed by either making…
021
Reposted by Jay Bosamiya
Kai Sassnowski and 3 others @sassnow.ski · 21/08/2025
Still super proud of this video I made 2 years ago. Views have kinda flat-lined so I'm posting it again because dammit I want people to see it! (The video title is probably not helping its popularity but I don't know what else to call it) www.youtube.com/watch?v=otO3...
youtube.com
Coordinate Spaces for 2D Game Developers
YouTube video by Kai Sassnowski
23611
Jay Bosamiya @jaybosamiya.bsky.social · 17/08/2025
> I really hate that this all makes sense. I hoped that when I started to look into this that it'd be something so obviously wrong. I wasn't able to find that, and that realization disturbs me. Xe’s post is well worth the read.
020
Jay Bosamiya @jaybosamiya.bsky.social · 17/08/2025
15/21. I knew a bunch of these but was still surprised by others. Neat quiz
030
Reposted by Jay Bosamiya
Ian Coldwater 🧊🚫 @lookitup.baby · 17/08/2025
This is such good product advice and not just for games
616523
Reposted by Jay Bosamiya
𝔅𝔲𝔱𝔱𝔬𝔫𝔰 𝔒'𝔊𝔥𝔬𝔲𝔩𝔦𝔥𝔞𝔫 @johnxuandou.bsky.social · 13/08/2025
This is one of the most beautiful things I have witnessed, the craft here is impeccable.
461222318468
Jay Bosamiya @jaybosamiya.bsky.social · 13/08/2025
“They’re trained to be deputies, and they are fundamentally confused” — Lea Kissner at USENIX Security, talking about agentic systems and how they get attacked
010
Jay Bosamiya @jaybosamiya.bsky.social · 13/08/2025
Posting now after having had some rest: this past weekend, we (MMM) won DEFCON CTF once again! Fourth year in a row!! Thanks to Nautilus for running a challenging contest, and to all other teams for keeping us on our toes.
A photo of the Maple Mallard Magistrates CTF team. Folks are excited by the win but also oh so tired.
030
Jay Bosamiya @jaybosamiya.bsky.social · 25/07/2025
> I am the writer’s block, resolved mid-sentence. Pure joy reading this post www.mcsweeneys.net/articles/the...
mcsweeneys.net
The Em Dash Responds to the AI Allegations
“In recent months, a curious fixation has emerged in corners of academia: the em dash. More specifically, the apparent moral panic around how it is...
010
Jay Bosamiya @jaybosamiya.bsky.social · 21/07/2025
Live @dimension20.bsky.social last night
Photo from the seats at Climate Pledge Arena in Seattle of Dimension 20 Live. Brennan can be seen on the large screen with his characteristic animated gestures. The Intrepid Heroes can be seen lit in the center of the arena while a deep dark blue glow covers the audience. The energy is wild and the vibes are immaculate.
030
Reposted by Jay Bosamiya
Konnor Rogers @konnorrogers.com · 18/07/2025
This is art: secretgeek.github.io/html_wysiwyg...
secretgeek.github.io
This page is a truly naked, brutalist html quine.
14218
Reposted by Jay Bosamiya
Rebane @rebane2001.bsky.social · 15/07/2025
1337 is a fun number because it also drops a nice "1333337" in your hexdump
1252
Jay Bosamiya @jaybosamiya.bsky.social · 12/07/2025
I scored 10/28 on jsdate.wtf I knew some of these already (why is space in my brain reserved for this in a language I don’t even use regularly, I’ll never know) but wow this quiz is beautifully structured to troll you hard. Would recommend.
010
Reposted by Jay Bosamiya
Freya Holmér @freya.bsky.social · 09/07/2025
1:59 am: I'll just stay up a liiiittle longer, 1 am isn't *that* late :) 2:01 am: shit it's almost 3 am already what happened
731518
Reposted by Jay Bosamiya
Alt Boo-reau of Lake-Monster Spook-tistics @domesticshoggoth.bsky.social · 08/07/2025
Everything since guy hit thing with rock just old thing faster. Better tool for hit faster & stronger. New power sources is more hitting per man hour. Science, finance, management, culture, just abstracting and optimizing hitting more things with better rocks
1121
Jay Bosamiya @jaybosamiya.bsky.social · 21/06/2025
Picked up some basic wood carving tools just to see if I’d like it and omg this is so much fun! Am working without any guidance/tutorial, so am clearly making mistakes, but still it looks good?! The flaws seem to give the piece character. Would recommend
020
Reposted by Jay Bosamiya
pork, cheese, broccoli rabe @garlicbuffalo.gobirds.biz · 21/06/2025
amtrak’s marketing team gets it
445305619988
Reposted by Jay Bosamiya
André Arko @indirect.io · 20/06/2025
a jj shell prompt, but fast because of powerlevel10k (it took me two weeks to implement it and another week to write 3800 words about it, I hope you enjoy) andre.arko.net/2025/06/20/a...
andre.arko.net
a jj prompt for powerlevel10k
I’m in the process of switching from git to jj right now. That switch is another post of its own, which I am still working on, but in the meantime I wanted to write up the way that I’ve set up my shel...
4308
Jay Bosamiya @jaybosamiya.bsky.social · 30/05/2025
This is silly in the best possible meaning of silly
100
Reposted by Jay Bosamiya
Nik Swamy @lambdanik.bsky.social · 29/05/2025
PulseParse & EverCBOR Uses F* and Pulse to formalize several new standards for secure data formats and attestations, including CBOR, CDDL, and COSE, producing verified libraries and compilers. arxiv.org/abs/2505.17335 #fstarlang #pulse #everparse #rust #cbor #cddl #cose #dice #dpe
arxiv.org
Secure Parsing and Serializing with Separation Logic Applied to CBOR, CDDL, and COSE
Incorrect handling of security-critical data formats, particularly in low-level languages, are the root cause of many security vulnerabilities. Provably correct parsing and serialization tools that ta...
182
Reposted by Jay Bosamiya
Keenan Crane @keenancrane.bsky.social · 29/05/2025
Anyone interested in 3D printing some funky dice—like a "fair dragon" which can land in three different ways, or a single die equivalent to to 2D6? We've now put printable STL files online: www.cs.cmu.edu/~kmcrane/Pro... More info here: hbaktash.github.io
2518
Reposted by Jay Bosamiya
Hila Peleg @hilacodes.bsky.social · 27/05/2025
"Every time someone utters the words 'general purpose' what they mean is 'I've optimized for a thing but I don't know what that thing is'." --David Chisnall
24616
Reposted by Jay Bosamiya
A.L. Goldfuss @ghoulpus.bsky.social · 25/05/2025
And if you are a creative who suddenly can’t think of anything new, you did not run out of ideas. You are burnt out. Spend time with loved ones, read non-fiction, watch interesting movies. Refill your well and the ideas will come back.
110928
Reposted by Jay Bosamiya
A.L. Goldfuss @ghoulpus.bsky.social · 25/05/2025
Also, the more you entertain your ideas by writing/drawing/composing them, the more ideas you will get. Don’t be precious with your ideas. You are training your brain to make more.
17610
Reposted by Jay Bosamiya
Danny Deraney @dannyderaney.bsky.social · 04/05/2025
Wanna see something cool? At the Grammy's in 1976, Ella Fitzgerald and Mel Torme explained what jazz is. The result? The crowd losing its mind. 🔥
586138033584
Reposted by Jay Bosamiya
Bec Shaw @brocklesnitch.bsky.social · 08/04/2025
Just remembered this adorable old video, this kid has such good comic timing I hope you’re thriving out their queen
713363452
Reposted by Jay Bosamiya
Jay Bosamiya @jaybosamiya.bsky.social · 16/03/2025
Dust off your boots, grab your hats, and get ready for a showdown — Plaid CTF is headin' for the frontier! On April 4, we venture westward. But will you have what it takes to rise to the challenge of The Good, The Plaid, and The Ugly? plaidctf.com
Vector art of an old Western scene in warm colors, with the text "The Good, The Plaid, and The Ugly".
021
Reposted by Jay Bosamiya
Ange @angealbertini.bsky.social · 02/04/2025
"Polyglot files are unnatural and never existed in the wild", they say. Aperture cards are punched cards with a microfiche, indexing 'analogue' images with punched cards data on the same medium. A standard polyglot document IRL defined in the 1960s.
A photo of an aperture card:
a 80-column punched card with columns 54 to 76 used by a microfiche.
0247
Jay Bosamiya @jaybosamiya.bsky.social · 30/03/2025
cool cool cool cool this is just np-hard cool cool cool cool
media.tenor.com
a man in a leather jacket and tie is saying cool cool cool cool cool cool cool
Alt: a man in a leather jacket is saying cool cool cool cool cool cool cool
010
Jay Bosamiya @jaybosamiya.bsky.social · 16/03/2025
Dust off your boots, grab your hats, and get ready for a showdown — Plaid CTF is headin' for the frontier! On April 4, we venture westward. But will you have what it takes to rise to the challenge of The Good, The Plaid, and The Ugly? plaidctf.com
Vector art of an old Western scene in warm colors, with the text "The Good, The Plaid, and The Ugly".
021
Jay Bosamiya @jaybosamiya.bsky.social · 09/03/2025
Great thread. Swift on Security on Swift’s Security
010
Reposted by Jay Bosamiya
localthunk @localthunk.com · 07/03/2025
I've had parts of this written down for a while - but I thought it was about time to document the detailed version of what happened during Balatro development localthunk.com/blog/balatro...
localthunk.com
The Balatro Timeline — LocalThunk
It’s been approximately 3 years since I began work on Balatro - and in that time I have personally documented almost nothing about the journey. This is something that has bothered me since the game la...
11241821045