Computer scientist with a PhD in cybersecurity, worked quite a lot with TEEs and confidential computing, currently on a research grant playing with drones.
Leuven, BE
Joined September 2011
- Tweets40
- Following94
- Followers37
- Likes409
Gianluca Scopelliti retweeted
Gianluca Scopelliti retweeted
"Understanding Trust Relationships in Cloud-Based Confidential Computing": a great paper by @gianlu33 et al. on whether you can trust big CSP's remote attestation for confidential computing. (Spoiler: you can't.)
Slides and paper: bobspot.org/publications
Gianluca Scopelliti retweeted
Intel HW is too complex to be absolutely secure! After years of research we finally extracted Intel SGX Fuse Key0, AKA Root Provisioning Key. Together with FK1 or Root Sealing Key (also compromised), it represents Root of Trust for SGX. Here's the key from a genuine Intel CPU😀
Gianluca Scopelliti retweeted
How I published 1 first-author paper during 2.5 years of my post-doc:
- I collected all my data and learned how to become a scientist.
- I read like a normal human being.
- I write like a normal human being.
Seems to be paying off.
This quoted post is unavailable.
Gianluca Scopelliti retweeted
For the first time since the Halloween Solar Storms of 2003 we have now officially reached the Extreme G5 geomagnetic storm threshold at 22:54 UTC.
With an observed Dst at -348 this is now one of the all-time strongest geomagnetic storms of the modern era only rivaled by the Halloween Solar Storms of 2003 and the 1989 storm that knocked out power grids in Quebec.
You are witnessing space weather history today... and it isn't over yet. Sky watchers in the USA, this is your ultimate chance to see aurora from states like California and Texas. Do not miss out on this opportunity!
Gianluca Scopelliti retweeted
The videos of @NDSSSymposium #NDSS24 are finally available. Enjoy a (re-)watch of the keynotes and check out the presentations of your favorite papers!
📺Head over to the NDSS Symposium YouTube Channel to see recordings of keynote presentations by Meredith Whittaker @mer__edith and Prof Herbert Bos + all #NDSSsymposium2024 sessions youtube.com/@NDSSSymposium/f…
Gianluca Scopelliti retweeted
Microsoft engineer: 500ms lag in liblzma? Something's up.
Also Microsoft engineer: 45 minute lag in Microsoft Teams? Perfect.
Quick announcement: my paper "Efficient and Timely Revocation of V2X Credentials" has been accepted at @NDSSSymposium'24! Looking forward to presenting my work in San Diego next February✈️
Many thanks to my co-authors Christoph Baumann, @FritzAlder, @eddytruyen and @jtmuehlberg
Gianluca Scopelliti retweeted
This was taken in 2016 in the Arctic Ocean. I was inspired by eight million voices from around the world calling for Arctic protection.
Today is Earth Day and there's still an urgent need of help to support the work in the environmental movement.
#EarthDay
Check out our paper (just accepted at @ACMDL TOPS) on using TEEs like #IntelSGX, #ARMTrustZone and #Sancus to enhance security in cyber-physical systems. Huge thanks to @FritzAlder, @jtmuehlberg, @SepidehPouyan and all the others involved in this project.
dl.acm.org/doi/10.1145/35926…
Gianluca Scopelliti retweeted
I hacked into a @Bing CMS that allowed me to alter search results and take over millions of @Office365 accounts.
How did I do it? Well, it all started with a simple click in @Azure… 👀
This is the story of #BingBang 🧵⬇️
Gianluca Scopelliti retweeted
The recent WhatsApp accounts takeover is simple and genius.
This is how it works:
You're sleeping.
A "hacker" tries to login to your account via WhatsApp.
You get a text message with a pincode that says "Do not share this".
You don't share it, yet you still get hacked.
How?
Gianluca Scopelliti retweeted
Our ESRs have presented their work via splashing posters and demonstrations at the recent Ericsson Security Research day in Stockholm.
ALT From left to right: Merve Turhan, "Secure In-Process Rollback with Isolated Domains"; Gerald Budigiri, "Elastic Cross-Layer Orchestration of Network Policies in the Kubernetes stack"; Gianlucca Scopellitti, "Scalable and Provable Secure Self-Revocation Protocols for V2X".
