Kathi Ceesay-Seitz

Hardware Security Researcher, Ex-CERN Embedded Software Developer / Digital Electronics Verification Engineer

[johannes @wiknerj]

The first ever end-to-end cross-process Spectre exploit? I worked on this during an internship with @grsecurity! An in-depth write-up here:
https://t.co/mze3LQkpJR

[johannes @wiknerj]

HW defenses against Spectre are tricky: they need to be applied correctly by the SW, and we need to trust that the HW does what its supposed to. Our latest work "Breaking the Barrier" exploits loopholes in both of these issues on Intel and AMD parts.

https://t.co/DBzOXdf75h

[Kathi Ceesay-Seitz @K_CeesaySeitz]

We define 𝜇CFI, a new CPU security property that detects microarchitectural constant time violations and CPU vulnerabilities that allow control-flow-hijacking attacks (4 RISC-V CVEs) or proves their absence: https://t.co/Sn0dUCUvem (Paper at CCS'24)
@FlavienSolt
@kavehrazavi

[Kathi Ceesay-Seitz @K_CeesaySeitz]

New RISC-V CPU developments provide the opportunity to consider security by design.

Recently discovered vulnerabilities (e.g., https://t.co/NkpZjW2Re3 by CISPA), however, show that also new designs are insecure.

Is it a lack of care or lack of security verification tooling?

[Michele Marazzi @marazzi_michele]

For the first time, we imaged and reverse engineered 6 modern DDR4/5 DRAM chips (https://t.co/1aMIwoEbK7)

Due to the incredibly small feature size of modern ICs, we use SEM combined with FIB reaching pixel resolutions as low as 3.4nm. Then we evaluate 10 years of DRAM research.

[Patrick @pjattke]

Our latest work, #ZenHammer 🔨, shows that #AMD Zen 2/3/4 systems are equally vulnerable to frequency-based #Rowhammer as #Intel systems. We also present the first #Rowhammer bit flips on #DDR5 DRAM. (1/2)

[Flavien Solt @FlavienSolt]

Oh! 37 new bugs (28 new CVEs) discovered in 5 RISC-V CPUs (e.g., BOOM and CVA6)! #Cascade fuzzes #RISC-V CPUs based on novel basic principles. Try it on your own CPU, it’s open! https://t.co/5JwUKghZ5L (with @K_CeesaySeitz @kavehrazavi)

[Daniël Trujillo @thedantrujillo]

Dreams don't affect reality, but they may influence your actions. Turns out this applies to AMD CPUs too! After a long embargo, we can now present Inception, a new transient exec. attack that leaks data on all AMD Zen CPUs. With @wiknerj and @kavehrazavi.
https://t.co/AzH00keYOS

[Kathi Ceesay-Seitz @K_CeesaySeitz]

@engineers_feed Kindergarden teachers

[Kathi Ceesay-Seitz @K_CeesaySeitz]

@zipcpu Which one is standard compliant?

[Tom Verbeure @tom_verbeure]

Question: you are simulating a RISC-V CPU that is running a C program. You are recording a VCD (or FST) trace. How do you correlate between the instruction address in the waveform and the line of C code?

[Kathi Ceesay-Seitz @K_CeesaySeitz]

Happy International Day of Women and Girls in Science 2023 ✨☀️#WomenInScienceDay

[Kathi Ceesay-Seitz @K_CeesaySeitz]

AMS Algorithmus: "die empirische Analyse zeigt eben,
dass ... das Faktum eine Frau zu sein oder einer höheren
Altersgruppe anzugehören zu einer Verringerung der Arbeitsmarktchancen führt." (https://t.co/HOYIhiIfwr)

Fortführung von Diskrimination
#arbeitsmarktservice #austria