-----BEGIN PUBLIC----- Get ready 🔥🔥 I'm so happy to share that for another year I could contribute to Google CTF by authoring and mentoring challenges in the crypto category 🔒🔑 Looking forward to seeing all the amazing teams working on them. -----END PUBLIC-----

🥳 We just released paranoid_crypto. The library checks for trivial weakenesses on crypto artifacts generated by black boxes (i.e. when we don't know how they were generated). Official call for contributions to be published soon. Joint work with Daniel Bleichenbacher.

Developers are often expected to review software for vulnerabilities, yet most don’t get explicit training in this area nor are they rewarded for doing secure code reviews.

Check out our blog post to learn results from our experiments with Paranoid (github.com/google/paranoi…). Our open-source project that detects the usage of weak cryptographic artifacts, such as public keys and digital signatures --> security.googleblog.com/2022/08/announ…

This past weekend we had an amazing event. The Google CTF Finals 2022 which were ran as a game hacking competition we named #Hackceler8. We tried to bring under one roof some of the folks with the best hacking skills in the world and have them do/hack a videogame speedrun. 🧵1/N

I am grateful the Swiss Research Magazine Horizons chose to write about our study. Novice reviewers required step-by-step checklist aid in simpler code reviews but needed more autonomy to perform better in a complex review. horizons-mag.ch/2022/09/01/che… Enrico Fregnan Alberto Bacchelli Tobias Baum

Great news! Our paper “First come first served: the impact of file position on code review” (arxiv.org/pdf/2208.04259…) was selected as one of the distinguished papers at FSE 2022! 🎉🎉🎉 Congrats and thanks to all the authors Larissa Braz Marco D'Ambros Gül Calikli Alberto Bacchelli

🏆🏆🏆 #FSE2022 ACM SIGSOFT Distinguished Paper Awards have been announced!! Congrats to the authors for their amazing work! 🏆🏆🏆 We will tweet out details about each paper this week. 2022.esec-fse.org/info/awards

Are you a software practitioner? Researchers from University of Glasgow (Tiffany Babey, Catherine Happer, Tim Storer) would like to learn your opinion about #sustainability in #software practices. Here is the survey 👉glasgow-research.onlinesurveys.ac.uk/sustainability………. It does not take more than 10 minutes ⏲️

It's that time of the year again 😅 I'm looking for amazing software developers to participate in one of our experiments 🥺🥺🥺 If you have 20-30 minutes, please consider participating: review.ifi.uzh.ch To thank you, we will donate 5 USD to a charity of your choice!

Congratulations to Enrico Fregnan, Larissa Braz, Marco D'Ambros, Gül Calikli, Alberto Bacchelli for their paper being selected as one of the seven ACM SIGSOFT Distinguished Paper awards at FSE 2025 buff.ly/3MvT4Ye

Heartfelt congratulations to now Dr. Larissa Braz for very successfully (summa cum laude!) defending her PhD thesis today. Topic: "Secure Code Review." Thank you, Larissa, it was a great honor to have you as a Ph.D. student ZEST!

I still have no words!! 🤩🤩🤩 thank you, Alberto Bacchelli , for the amazing advices and knowledge you shared! I had amazing moments at ZEST 🎓🎓🎓

Congrats, doctor Enrico Fregnan !! 🧑🏼‍🎓🎓What an amazing work you and Alberto Bacchelli have done! 👏🏻👏🏻👏🏻

Are you a Python developer? Can you spare 15-20 minutes for code review research? Join our online experiment: experiment.sback.it. As a thank you, we'll donate $5 to a non-profit on your behalf. #Python #CodeReview

The Faculty of Economics, Business & Informatics University of Zurich has opened an Assistant Professorship in Cybersecurity (Tenure Track) within the Department of Informatics UZH IfI! Apply by Nov 15! More details: ifi.uzh.ch/en/department/…

Come work with us on mitmproxy this summer! 🚀 Google Summer of Code is a unique opportunity to get into open source with a nice stipend attached. We have Rust, Python, and TypeScript projects. github.com/mitmproxy/mitm…