Addison

PhD at CISPA, member at secret.club, sleeping at home

Website: https://addisoncrump.info/
CISPA: https://cispa.de/en/people/c01adcr
secret.club: https://secret.club/author/addison
ORCID: https://orcid.org/0009-0003-3271-3558
GitHub: https://github.com/addisoncrump
Language: en (native), de (b1/2), sq (a1)
Bluesky: https://bsky.app/profile/addisoncrump.info

Public Key

npub12z3yzarwq6n46tt8f4pykkkl9n8f6wdzepe4whq375q5jpjy5ehq37cc8l

NIP-05 Address

addison_at_nothing-ever.works@momostr.pink

Profile Code

nprofile1qqs9pgjpw3hqdf6a94n56sjttt0jen5a8x3vsu6htsgl2q2fqez2vmspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dssj39uu

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub12z3yzarwq6n46tt8f4pykkkl9n8f6wdzepe4whq375q5jpjy5ehq37cc8l

Show more details

Last Notes

2026-04-07 11:18:26 UTC

- reply

ah I already follow you my friend 😄

2026-04-06 23:19:39 UTC

I may very well be giving up on reading random blogs soon. The machines have gotten too good at simulating decent writing, and I simply cannot tolerate having my time disrespected so often.
Humans with decent, human-written #blogs, let yourselves be known. Otherwise, I will need you to, politely, fuck off.

2026-04-04 18:25:02 UTC

Right now, there's a really funny opportunity to burn an Outlook zero day.

2026-03-29 02:51:50 UTC

- reply

Concur; @npub1958…x4mx asked for my take here, and I don't have much else to say. Last CTF I attended without this rule was really unfortunate.

2026-03-19 22:58:41 UTC

- reply

meanwhile, they are also sending slop to OSS folks. See my most recent comments in PCRE2 repo, lol

2026-02-18 08:26:18 UTC

- reply

Then it's time for an Rc<RefCell<Session>> instead of a lifetime (or Arc<RwLock<...>> if asynchronous). Just be careful to avoid cycles. :)

2026-02-18 08:09:07 UTC

- reply

Yeah, you'll need some indirection here. You can't move session while it is borrowed. Alternatively, you can keep the widgets in the session (e.g., in a vec or smth) and only offer (mutably) borrowed access to the widgets by an ID or something. It just depends on what's appropriate for your use case; presumably, widgets should always be deinitialized when the session is, so the session should "own" the widgets.

2026-02-18 08:00:39 UTC

- reply

Can you be more specific about what you want to do?

2026-02-07 12:04:36 UTC

On the ethical obligation to use LLMs for vulnerability research: https://addisoncrump.info/research/a-horrible-conclusion/

2026-02-05 11:26:12 UTC

I appear to have been indexed by an LLM-based hiring platform: https://www.getprog.ai/profile/10711159
I've submitted a takedown request, but I struggle to believe that this platform is GDPR-compliant. Anyone have a more educated view on this, and what my options are?
#gdpr #law #recruiting #llm

2026-01-19 04:41:53 UTC

There seems to be some misinfo kicking around that France (or Ukraine, depending on who you ask) intentionally fed false information to the US, which was then observed as transmitted to Russia.
Ukrainian sources dispute this heavily: https://unn.ua/en/news/did-ukraine-allegedly-provide-the-us-with-distorted-intelligence-the-gur-rejected-fakes-from-kremlin-bot-farms
Only sources boosting this claim are reporting based on Twitter reports.
If this actually happened, you would never hear about it; this would be one of the most closely guarded counterintelligence secrets around. Stay safe out there kids, and fact check online sources with trusted ones.

2026-01-01 16:53:48 UTC

- reply

Glad it was thought-provoking, but it sounds like I need to work on my communication style... 😅 I'm glad you liked it!

2025-12-27 13:02:05 UTC

I've added the slides and the source code for the Sokoban game to the links for my presentation; it appears on the app, but seemingly not the website... For reference, they are:
Links
[Source Code (wasm)](https://codeberg.org/addisoncrump/39c3-clients)
[Source Code (web)](https://codeberg.org/addisoncrump/pages-source)
[Slides](https://docs.google.com/presentation/d/15lsrpwDTH2kdZFNVKPrACytP96uz3qK6lES8F3EU5Ro/edit?usp=sharing)
[Sokoban Fuzzer](https://github.com/addisoncrump/sokoban-fuzz)
I'll be changing out the sokoban puzzle every 30 minutes from hereon out :)
#39c3 #fuzzing

2025-10-28 16:31:44 UTC

A little interactive post on a little error in fuzzer evaluations: https://addisoncrump.info/research/metric-shenanigans/

2025-10-26 01:21:26 UTC

Got angry, posted about academic fuzzing research status quo again: https://addisoncrump.info/research/what-the-hell-are-we-doing/

2025-08-14 23:39:45 UTC

New rant about fuzzing just dropped: https://addisoncrump.info/research/consideration-of-input-shapes/

2024-11-11 14:38:50 UTC

Happy to announce the SBFT'25 fuzzing competition! Unlike previous years, we will favour fuzzers which are better at discovering novel edges and **will accept existing fuzzers as submissions**, so there is no excuse to not join in :^)
Register and find details here: https://sbft25.github.io/tools/fuzzing

2024-10-06 16:12:21 UTC

Why I don't write exploits*: https://addisoncrump.info/important-information/why-i-dont-write-exploits/
In which I describe why I avoid writing exploits at all costs.
#testing #defense #vulnerability #academia #research

2024-09-30 06:17:41 UTC

- reply

How would that be applied? My goal is to simply rearrange the pixels, this seems more like signal processing.

2024-09-30 03:43:48 UTC

Suppose I have an image and want to show the distribution of colours in that image. Obviously, I can sort the pixels in a line and be done. But what if I wanted to preserve the original photo's dimensions, while minimising the colour distance across neighbouring pixels in both dimensions?
#graphics #computationalimaging #art

2024-09-14 23:44:58 UTC

More ranting, as a result from a conversation I had with a couple other #fuzzing people:
https://addisoncrump.info/research/fuzzers-and-gaming/

2024-08-24 01:57:21 UTC

New rants for today:
- PCRE2 and fun testing difficulties: https://secret.club/2024/08/23/ring-around-the-regex-2.html
- Ruminations on fuzzer evaluations: https://addisoncrump.info/research/thinking-about-fuzzer-evaluation/