Mastodon: https://teapawt.net/t.co/zbE8uyp1Qw
Joined April 2011
- Tweets67
- Following525
- Followers146
- Likes127
Very exciting to see the @ETH_en president, @Joel_Mesot, talk about our work at the Swiss Cyber Security Days 2024 🚀+Phone (plusphone.org) is based on TEEtime: an open and secure smartphone architecture without compromises in functionality @shw3ta_shinde @SrdjanCapkun
Ivan Puddu retweeted
As a first step, we have built TEEtime.
Users can now run secure apps in a domain that is not controlled by the OS, without trading off the protections provided by OS vendors. Win-win!
Joint work with a fantastic team @SrdjanCapkun @dn0sar @Mark_Ku96
Paper arxiv.org/abs/2211.05206
In our paper to appear @USENIXSecurity 21, we observe that when frequently issuing interrupts, instructions execution times correlate with their virtual address (mod 16). We used this to exploit SGX enclaves. \w Moritz Schneider @M__Haller @SrdjanCapkun
arxiv.org/abs/2005.11516
ALT Picture of the first page of the paper. Top right: "Usenix artifact evaluation passed" badge. Paper title: Frontal Attack: Leaking Control-Flow in SGX via the CPU Frontend Authors: Ivan Puddu, Moritz Schneider, Miro Haller, Srdjan Capkun Affiliation: ETH Zurich
The effect is more noticeable with memory writes: e.g. a memory write instruction at address 0x6 tends to execute slower than one at 0xe (mod 16), with the difference being up to 100 cycles on average, as shown below in a figure from our proof-of-concept.
github.com/dn0sar/frontal_po…
Ivan Puddu retweeted
Intel are disclosing 77 vulns today (blogs.intel.com/technology/2…), some in their CPUs - HW bugs are always painful, but hardware is never perfect. Happy to see TAA disclosed after I found it >1y ago, but @dkg0414's page size issue looks a lot more painful. JCC icache errata too.
Ivan Puddu retweeted
After enough hours of sleep it's time to announce that we got the 5th place at @oooverflow #DEFCON CTF as the best European team! Congrats to PPP (@PlaidCTF) for collecting more black badges this year and hosting us at the after-party, you guys are awesome! 🚩 #DEFCON27 #CTF
Ivan Puddu retweeted
Dan Goodin @dangoodin001 has covered our research on aircraft landing systems as one of @arstechnica today's feature stories. teapawt.net/arstechnica/status/112… Thank you @ihackedwhat, @dalfry for the comments. Thank you @dangoodin001 for the fantastic report.
The radio-navigation planes use to land safely is insecure and can be hacked arstechnica.com/information-… by @dangoodin001
Ivan Puddu retweeted
ETH doctoral students of #computer science show how linking two popular technologies can have highly problematic consequences for web services such as e-voting systems. ethz.ch/en/news-and-events/e…
Ivan Puddu retweeted
Wie sich elektronische Abstimmungen kaufen lassen. Die ETH-Studie zu Crowdturfing und E-Voting aus der gestrigen Zeitung tagesanzeiger.ch/schweiz/evo… ist mittlerweile erschienen. Hier: arxiv.org/pdf/1903.00449.pdf verfasst von @dn0sar et al.
Ivan Puddu retweeted
Our entire team at the #riscv summit. From the left - Michael, Florian, Alex The Bear 🐻, Ivan, Moritz, and Matheus.
Look @LucaBeniniZhFe they are all wearing the #PULP t-shirts 👕.
@ms_snowman @be4web @suehtamacv
Ivan Puddu retweeted
Hey hackers! We survived our first @DEFCON #CTF and ended up in 7th place! Congratz to DEFKOR00T for eating maccheroni and to @oooverflow for such a nice competition! /CC @towerofhanoi @c00kiesATvenice @n0pwnintended @TheRomanXpl0it @JBZTeam
Ivan Puddu retweeted
#IntegriKey: a new way to make sending messages safe, even in a #hostile environment! First product of its kind on the market: #WANTED academics and industrial partners for further development. @SrdjanCapkun syssec.ethz.ch/ bit.ly/IntegriKey
Ivan Puddu retweeted
Email triage strategy
- Not important: mute
- Important: answer immediately
- VERY IMPORTANT: wait until I can answer in detail, oh no it's been a month and I still haven't answered, oh god it's been another month, maybe I can change my name and move to Alaska
Ivan Puddu retweeted
One of our bright students reverse engineered cache hierarchy of a commonly-used integrated GPU, used it to trigger rowhammer flips in the browser on phones (very first time) and built a reliable browser exploit using those flips! #rowhammer #glitchattack #SP18 @IEEESSP @vu5ec teapawt.net/pit_frg/status/9919842…
Disclosure process is over folks! Finally we can now share our work /cc @gober @c_giuffrida @herbertbos @vu5sec. Also big thanks to @brainsmoke for helping out with #GLitch
vusec.net/projects/glitch/
