alvise

PhD Student @vu5ec (Systems Security). Previously: decompilers @_revng, rockets @skyward_er

[Mark Ermolov @_markel___]

Hardware glitching masters have taken on Intel's microarchitecture - very, very cool! I'm so glad our work is contributing to research that was previously unimaginable. Research into hardware attacks on Intel processors has enormous potential...
https://t.co/4PQF1APL6E

[Travis Goodspeed @travisgoodspeed]

Remote code execution on a Yamaha piano.

https://t.co/Gt2Yf5zO1D

[alvise @HBitmasks]

The Spectre exploit chef @SanWieb just gave an impeccable talk at @USENIXSecurity about our work on Spectre gadgets analysis and native BHI exploitation. Very happy - and proud of the Distinguished Paper award too :)

[Herbert Bos @herbertbos]

Happy to report that our InSpectreGadget paper won a Distinguished Paper award at @USENIXSecurity:

https://t.co/Hh4sbo4dM4

@vu5ec @SanWieb @HBitmasks @c_giuffrida

Here is @SanWieb presenting the paper:

[Erik van der Kouwe @EKouwe]

Just a few days left to apply to our PhD and PostDoc positions available at @vu5ec. If you love low-level systems hacking and would you like to work at a top systems security research group in Amsterdam, consider applying: https://t.co/XLxFJzmrG5

[rev.ng @_revng]

😎 We’re going to REcon 2024! 😎

This will be the first talk in which we introduce the decompiler since the open source release.

It will be very much an hands on talk. Don’t miss it.

See you in June in Montreal! ⚜️🌹☘️

https://t.co/AKmgU6ehGL

[alvise @HBitmasks]

If you ever happen to look for Spectre gadgets manually and feel pain and loneliness, you should check https://t.co/Ho9NG26tGD ... It's been a wild ride, but working with @SanWieb was the best thing ever :) Also, BHI is back baby

[VUSec @vu5ec]

Branch History Injection (BHI) is back! Disclosing Native BHI, bypassing deployed Spectre-v2/BHI mitigations (e.g., eBPF=off) to leak arbitrary kernel/host memory (e.g., root password hash below). Joint work by @SanWieb @HBitmasks @herbertbos @c_giuffrida: https://t.co/MF65XzpqnA

[rev.ng @_revng]

We ended up on HN and some interesting discussions emerged: https://t.co/rFeKRxE74G

[VUSec @vu5ec]

Disclosing #SLAM, aka how to combine Spectre and Intel LAM (& co.) to leak kernel memory on future CPUs (demo below). Thousands of exploitable "unmasked" (or pointer chasing) gadgets in the Linux kernel. Joint work by @MatheHertogh @SanWieb @c_giuffrida: https://t.co/8sgL8t8eC5

[Fish_ @fish_]

That’s also a way to mention the OSI layers @herbertbos🤣 #nohat2023

[Emanuele Vannacci @vanema94]

I'm thrilled to announce that our paper "Speculation@Fault" @USENIXSecurity is online! Read about how we automatically find information leakages arising from CPU exceptions by fuzzing against speculative contracts.

[Stefano Zanero @raistolo]

I am extremely happy about this paper, which is the brainchild of my PhD student @__L4w__ and my colleague @JinBlackx.

BINO addresses the irksome problem of identifying inlined functions (specifically from C++ template classes) in binaries.

https://t.co/yQA6guZ60K

[Djordje Todorovic @djtodoro]

Debug Location coverage for the variables in the optimized binaries compiled with the newest release of LLVM look nice. A bit longer post is at https://t.co/ZaiOQZlNSG. We started from 45%, and now we are at 71%, nice! @llvmorg

[NDSS Symposium @NDSSSymposium]

Should we lose hope already on Rowhammer attacks? Andrea Di Dio from Vrije Universiteit Amsterdam is showing us at #NDSS23 that it is feasible to devise a software-based design to mitigate ECC-aware Rowhammer attacks.

[VUSec @vu5ec]

Disclosing CHOP, aka how attackers can bypass commodity return address protections such as stack cookies by hijacking the exception handling process. Paper to appear @NDSSSymposium: https://t.co/SWNm3xhIzf. Joint work by @victor_duta Fabian Freyer @pagabuc @nSinusR @c_giuffrida

[Filippo Cremonese @fcremo]

Easily the highest impact bug I found (yet)

[alvise @HBitmasks]

What a blast! Thanks to all my incredible co-authors @aScarecrowHat @JinBlackx @mcarminati1988 @raistolo

[JinBlack (Mario Polino) @JinBlackx]

And we got this. Very happy about that.

[alvise @HBitmasks]

Great talk by @fcgorter about his project DangZero at @acm_ccs! Featuring also a nice little meme about @gregkh approving the work :) gg

[Stefano Zanero @raistolo]

A wild ⁦@HBitmasks⁩ delivering a great talk at ⁦@acm_ccs⁩

[JinBlack (Mario Polino) @JinBlackx]

I am at @acm_ccs , where @HBitmasks is about to present "Canflict: Exploiting Peripheral Conflicts for Data-Link Layer Attacks on Automotive Networks".

Thanks to all coauthors: @HBitmasks, @aScarecrowHat, @mcarminati1988, @raistolo
Full paper: https://t.co/5XvgBvapi1

[alvise @HBitmasks]

[update] We are presenting this work at @acm_ccs in a couple of weeks🥳 Come and say hi if you want to see some car hacking shenanigans :)

Paper: https://t.co/MQIMcKQOWr

[alvise @HBitmasks]

You know what @angealbertini does with file formats, right? Well, we did the same thing with communications protocols - because, why not? 1/N

[alvise @HBitmasks]

Btw, thanks to @raistolo @aScarecrowHat @JinBlackx for all the support on this! [EOF]