Andrin Bertschi

I like science, milk and late night walks.
Building and breaking systems @sectrs_ethz.

[Confidential Computing Summit @confcompsummit]

No public Arm CCA hardware? No problem.

Learn how #OpenCCA makes CCA research possible on $250 boards, driving open innovation in confidential computing. #CCSummit #ArmCCA @opaquesys @andrinbertschi https://t.co/3h63i156T1

[Shweta Shinde @shw3ta_shinde]

We will be presenting two papers today at @USENIXSecurity Track 3 Salon E @ 1:30pm
@SuprajaSridhara Acai connects Arm CCA confidential VMs to accelerators (eg Nvidia H100) efficiently
@BenedictSchluet Heckler, another Ahoi attack, breaks AMD SEV-SNP and Intel TDX with interrupts

[Shweta Shinde @shw3ta_shinde]

WeSee: Using Malicious #VC Interrupts to Break AMD SEV-SNP got the Distinguished Paper award at IEEE #SP24!

Blog & artifacts:
https://t.co/DelKis7I4B

Our talk is on May 22, Wed in Track 2, Ballroom 5 @ 1:25 PM #ahoi

Congrats @BenedictSchluet @SuprajaSridhara @andrinbertschi

[SecurityWeek @SecurityWeek]

Confidential VMs Hacked via New Ahoi Attacks https://t.co/qoW5epEmgb

[ETH Zurich @ETH_en]

Computer scientists at ETH Zurich have discovered a gap in the latest security mechanisms used by AMD and Intel chips. This affects major cloud providers including AWS and Google.

https://t.co/0RMOq0z5lK

#CloudSecurity #CloudServices

[Shweta Shinde @shw3ta_shinde]

We provide an overview of this new family of attacks
https://t.co/IcHsxM69Mx
Track CVE-2024-25742, CVE-2024-25743, CVE-2024-25744 for more updates on fixes and patches

A fantastic effort by @sectrs_ethz team: @BenedictSchluet @SuprajaSridhara @andrinbertschi @Zauney

[Andrin Bertschi @andrinbertschi]

After more than 6 months of hard work, we are thrilled to disclose #AhoiAttacks that break confidential computing offered by AMD SEV-SNP and Intel TDX with malicious interrupts.
https://t.co/FtDkvnk8m3

[Shweta Shinde @shw3ta_shinde]

Can a malicious cloud provider send bad notifications to break confidential VMs?
Disclosing #AhoiAttacks that break confidential computing offered by AMD SEV-SNP and Intel TDX by abusing interrupt delivery.
Check our @USENIXSecurity & @IEEESSP papers.
https://t.co/wxr7rBWX7U

[SECTRS @ ETH Zurich @sectrs_ethz]

Shout out to the Acai team! Supraja Sridhara , @andrinbertschi, @Zauney, @BenedictSchluet, Fabio Aliberti

[Shweta Shinde @shw3ta_shinde]

Had a great time presenting our latest work, Acai, at the ZTHA workshop.

Acai enhances Arm CCA, enabling confidential VMs to securely use accelerators like GPUs & FPGAs.

Check our Usenix Security'24 paper: https://t.co/94k83zw336

Acai is open source: https://t.co/AOxBpZTHl8

[Manuel Rigger @RiggerManuel]

Reach out to us if you are interested! My focus area will be on using automated testing techniques to find various kinds of bugs in data-centric software, but I'm interested also in many related areas.

[Andrin Bertschi @andrinbertschi]

@hdvanegasm You may want to try this out https://t.co/awqMuPtaM3

[Andrin Bertschi @andrinbertschi]

postcards supports new Swiss Post endpoints and new swissid authentication (code+code_verifier), version 2.0 released to PyPI. thanks to everyone involved🇨🇭📮🚀https://t.co/7fdEmhuAoZ

[Andrin Bertschi @andrinbertschi]

The screen capture of my thesis presentation is online. It summarizes the results of an experimental Truffle-hosted language runtime for the PHP programming language. @graalvm
https://t.co/nCEc3whwpm

[Andrin Bertschi @andrinbertschi]

@ast_eth Thanks for supporting our work. It has been much fun! :)

[AST Lab ETH Zurich @ast_eth]

Congratulations @andrinbertschi for your outstanding work on realizing a Truffle-based implementation of PHP and your great thesis presentation! The project is online at GitHub: https://t.co/rd85o8VJyp

[Andrin Bertschi @andrinbertschi]

#adfree got a new logo. Many thanks to Janis Bitta (who does not have twitter?) Logo available in next release. #codeandcoffee
https://t.co/F8SdkVqbJV

[Andrin Bertschi @andrinbertschi]

[3/3] Working in a team and tackling design issues that differ from the traditional monolithic arrangements of Unix/Linux was great fun! �� 🚀

Check out Barrelfish if you are interested in OS design and implementation https://t.co/o1GoHmZNr6

[Andrin Bertschi @andrinbertschi]

[1/3] Over the last 4 months, I worked with the great @liblor and two other colleagues on a minimal yet fairly complete, multi-core OS based on Barrelfish, an exo-kernel research OS at ETHZ. We implemented key design issues such as memory management with paging, ...

[Andrin Bertschi @andrinbertschi]

[2/3] inter-core synchronization, inter-process communication, name services, filesystem, shell, and networking support. Our fork runs on a ARM-based @Toradex Aster Carrier Board with the iMX8X module running 4 Cortex-A35.