Hovav Shacham

Looney Marxist UT professor poisoning the minds of young students about security, privacy, and tech policy.

[Hovav Shacham @hovav]

I won a thing, y’all! I’d hoped to say a few words, which the format didn’t allow: 1/ https://t.co/YyDPJ26yCs

[ACM CCS 2025 @acm_ccs]

Congratulations to the Test of Time Award winner Hovav Shacham for The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86)

[Deian Stefan @deiandelmars]

This has been a ridiculously fun and rewarding journey with @ShrNarayan @TomRittervg @MikeHommey @bhology @hovav @craigdissel @froydnj, many more at Mozilla and two who know better than to be on twitter (Tal Garfinkel and Sorin Lerner)

[Hovav Shacham @hovav]

Dear RISC-V folks: By all means, please do standardize¹ 96 encodings for 2-byte instructions that mean “pop registers (including ra), add to sp, and return.” They will come in very handy.
__
¹ https://t.co/X8Or5Izrw7

[Hovav Shacham @hovav]

NEWSHAM, T. 1997. Re: Smashing the stack: prevention? Bugtraq. Online.¹
NEWSHAM, T. 2000. non-exec stack. Bugtraq. Online.²
__
¹ https://t.co/TWFIDe3zGY
² https://t.co/tUqBzYsab3

[Hovav Shacham @hovav]

@stevecheckoway This was on noret, right? Man, that project was cursed.

[Dr Marco Langbroek 🇬🇱 🇩🇰 @Marco_Langbroek]

The #classified payload of the #NROL91 launch a few hrs ago was observed by me near 4: 17 UTC from #Leiden, the Netherlands, in a partly cloudy sky, as a magn. +2.5 to +3 object.
Image with a Canon EOS 80D + Samyang 1.4/35 mm, 5s, ISO 800.
@planet4589 @cgbassa @OrbitalFocus

[Hovav Shacham @hovav]

@againsthimself @DogeMocenigo Looks like this one: https://t.co/xQTvjREf3m

[Hovav Shacham @hovav]

Maybe @UTexasLaw should find someone else to teach Fed Courts?

[Hovav Shacham @hovav]

It is neither “hypothetical” nor “imaginary” that HB 20 was specifically written to platform Holocaust denial. It’s in the legislative record!¹
__
¹ https://t.co/csHdh9OT4q

[Hovav Shacham @hovav]

Sidebar: The restoration sounds like it was a big project.¹ ²
__
¹ https://t.co/n03WvVXhog
² https://t.co/RTN6GxZfk2

[Hovav Shacham @hovav]

Julia Morgan’s Charles A. & Carrie P.W. Kofoid House (1905) is for sale! https://t.co/TRxQCUMpmv

[Hovav Shacham @hovav]

Um, anyone hiring in security in Berkeley or SF?

[Hovav Shacham @hovav]

@Foone

[Hovav Shacham @hovav]

@alexstamos Funny thing, the original mainframe Axess application (written in-house using SPIRES!¹) worked great through telnet. Then it was replaced as part of the great $20m PeopleSoft boondoggle.²

¹ https://t.co/j90xtgCRUT
² https://t.co/jz57Qjk8Sl

[Hovav Shacham @hovav]

@matthew_d_green @LeaKissner Hear, hear!

[Hovav Shacham @hovav]

@veorq Heck, this attack was discussed in the BGLS'03 paper introducing aggregate signatures! And it had a long history by then in the context of multisignatures ...

[Hovav Shacham @hovav]

@georgemporter @TheSavageInMan A high of almost 90 degrees, my stars! It must be very difficult.

[Hovav Shacham @hovav]

@ekr____ This is really cool! It’s a nice computational complement to @estark37’s more philosophical PIR writeup.¹ (Also I like how it’s browser engineering that is driving PIR deployment.)
__
¹ https://t.co/sAozLKckl2

[Evelyn Douek @evelyndouek]

finally read the 3rd-party audit released by the Twitter whistleblower & it's not so much whistleblowing as... a list of known issues?

still, wld be great if every platform had to do one & release the findings!

that's one of my suggestions in here: https://t.co/DieWUt48Cl

[Hovav Shacham @hovav]

💔

[CalFalconCam @CalFalconCam]

From the incredibly talented Moon_Rabbit_Rising, some photos of Lindsay over the last few days.

Give her a follow on Instagram and check out even more pics!

https://t.co/Lo0Rf0x1nc

[Hovav Shacham @hovav]

@BRIAN_____ @agl__ https://t.co/cLSD4CISIm

[Riccardo Paccagnella @ricpacca]

We found a way to mount *remote timing* attacks on *constant-time* cryptographic code running on modern x86 processors. How is that possible? With #hertzbleed! Here is how it works (with @YingchenWang96).

https://t.co/SRUgBRQpu2