#InfoSec University Professor @ #TUGraz. #meltdown, #spectre, #rowhammer, cache attacks, sustainable security. Produced a side channel security sitcom.

Graz, Österreich
Joined October 2009
Daniel Gruss retweeted
The uASC'27 submission deadline has been extended by one week to August 4, 2026. We welcome work on all aspects of microarchitectural security, including attacks, defenses, analysis, and hardware-software interactions. uasc.cc/ #uASC #Microarchitecture
3
3
811
Congratulations Dr. @v4m1n! Thank you for the 6 years in my teaching and then research team! You're a great teacher and researcher! I am incredibly proud and impressed by your excellent PhD thesis, great papers, and the independence you got! All the best for your next endeavors!
1
1
13
733
Daniel Gruss retweeted
After an embargo of 256 days, I'm happy to reveal our newest work: we present TREVEX, a black-box CPU fuzzer that detects transient execution vulnerabilities in an automated manner. Running TREVEX on AMD, Intel, and Zhaoxin CPUs discovered multiple new CPU vulnerabilities!
1
61
4
315
30,546
Daniel Gruss retweeted
I'm looking forward to presenting my paper, "Continuous User Behavior Monitoring using DNS Cache Timing Attacks" at NDSS next week! We mount an Evict+Reload-style attack on the local DNS cache, detecting recently accessed domains and evicting to continuously monitor new accesses.
2
1
1
8
1,311
This is the best paper I have read in many years, but it is clearly not good enough for Oakland.
15
2,397
Daniel Gruss retweeted
In the autumn of 1942, a slight, 32-year-old Polish social worker named Irena Sendler passed through the gates of the Warsaw Ghetto with a carpenter’s toolbox in her arms. Beneath the hammers and nails lay a drugged six-month-old infant, breathing softly, utterly silent. One cry would have meant instant death for both of them. Irena smiled at the guards; they waved her through. They never suspected that this quiet woman would repeat the journey 2,499 more times. The ghetto was a slow-motion extermination. Starvation, disease, and random murder stalked every street. Jewish parents faced a choice no human being should ever have to make: keep their child and watch them waste away, or hand them to a stranger who promised a chance—however thin—at life. Irena came officially to inspect for typhus. In reality, she came to steal children from death. Babies left in toolboxes or ambulances under false bottoms. Toddlers sedated and tucked into potato sacks. Older children led by the hand through the stinking, lightless sewers while German boots marched overhead. “Not a sound,” she whispered as rats scurried past their feet. She knew that the rescued children would be given new names, new religions, new families. Their pasts would vanish unless someone remembered. So, on fragile scraps of tissue paper, Irena wrote each child’s real name, their parents’ names, and their new hiding place. She rolled the papers tight, slipped them into glass jars, and buried them beneath an apple tree in a neighbor’s garden. If she were caught and killed, the truth might still survive. She was caught. On October 20, 1943, the Gestapo kicked in her door. They took her to Pawiak Prison and demanded the list. When she refused, they smashed both her legs with iron bars. Then her feet. Then her arms. For weeks the beatings continued. She never spoke. They scheduled her execution. On the appointed morning, guards dragged the broken woman from her cell. Instead of a firing squad, she found herself outside the prison walls—alive. The Polish underground council Żegota had bribed a guard to mark her file “shot while trying to escape.” Officially dead, Irena Sendler limped back into the shadows to keep working.When the war finally ended, the first thing she did was dig up the jars under the apple tree. She spent years trying to return the children—now scattered across convents, farms, and foster homes—to whatever family might remain. Almost no parents had survived. But the children had. Because of her, 2,500 Jewish boys and girls lived to grow up, to marry, to have children and grandchildren of their own—an entire secret branch of the human family tree that the Nazis never managed to cut down.For decades her story stayed buried deeper than the jars themselves. Then, in 1999, four high-school girls in rural Kansas stumbled across a brief mention of her name. They found the old woman still living quietly in Warsaw and brought her courage back into the light. Journalists called her the greatest rescuer of the Holocaust. Irena only shook her head.“I could have saved more,” she said. “That regret follows me to the grave.”Irena Sendler—armed with nothing but a ghetto work permit, a toolbox, and a refusal to look away—proved that even in the heart of the worst evil humanity has ever devised, one determined person can still keep the darkness from winning completely.
318
3,335
205
13,677
357,696
Daniel Gruss retweeted
Today we reveal StackWarp: a new CPU vulnerability exploiting a synchronization bug in AMD’s stack engine across Zen 1–5 CPUs. It enables deterministic manipulation of Confidential VM's stack pointer, allowing RCE and privilege escalation via both control- and data-flow hijacking
16
168
8
1,324
150,505
Daniel Gruss retweeted
StackWarp: A new CPU vulnerability affecting AMD SEV-SNP (Zen 1-5). A malicious host can manipulate the stack pointer inside the confidential virtual machine, breaking integrity and confidentiality guarantees. /cc @Rayiizzz stackwarpattack.com/
8
1
44
4,438
Daniel Gruss retweeted
I‘ll be joining the Microarchitecture Security Conference (uasc) in Leuven this February - come by and say hello. 👋
4
2
15
933
I just registered for uasc.cc/ the Microarchitecture Security Conference February 3rd, in Leuven, Belgium. **Registration is free but mandatory!** Hope to see many of you there :) Especially Cologne+Ruhr area folks: it's just a short train ride to Leuven ;)
3
6
1,267
I'll arrive at the #39c3 tomorrow evening, see you there!
1
6
1,190
The crux of the entire diplomatic situation is that it was Russia, and only Russia, that started this war, and it is Russia, and only Russia, that has been refusing to end it throughout the full-scale invasion. From the very first minutes of February 24, Putin has been waging this war with complete disregard for how many of his own people he loses and how many of ours he kills. Russian commanders are not merely inclined to act brutally – they receive explicit orders allowing them to kill however they please. That is why Russia’s war is so bloody, taking lives both on the front lines and in peaceful Ukrainian cities. That is why Russia not only kills adults but also abducts children and tries to re-educate them so that they will take part in the war once they grow up. Russian commanders are now sending into assaults against Ukrainian positions those who were still in elementary school in 2014, when Crimea was occupied and Russia’s hybrid aggression against Ukraine began. This is a long war, and the main thing Russia is trying to do is to preserve its ability to wage it even longer, and not only against Ukraine. That is why we appreciate so deeply that so many forces and leaders are working for peace right now. Ukraine is grateful to the United States, to every American heart, and personally to President Trump for the assistance that – starting with the Javelins – has been saving Ukrainian lives. We thank everyone in Europe, in the G7, and in the G20 who is helping us defend life. It is important to preserve the support. It is important not to forget the main goal – to stop Russia’s war and prevent it from ever igniting again. And to achieve that, peace must be dignified. In just this one year alone, Putin has already sent hundreds of thousands of his own people to their deaths in order to occupy one percent or several percent of Ukrainian territory. And this is what Russia is doing – a country that already has more internationally recognized territory than any other state in the world. This nature of the war, and Russia’s attempts to prolong it, show that for them this is not about territory or about how one neighbor or another behaves toward Russia, but about Russia’s “right to wage war,” its “right to subjugate” others, and a fundamental absence of security. That is why we work so carefully on every point, on every step toward peace. Everything must work out the right way – so that this war is truly ended and so that it does not happen again. Thank you to everyone who is helping! Thank you, America! Thank you, Europe! I am proud of our people. Glory to Ukraine!
2,721
11,260
585
53,364
2,216,866
AAAI'26 has adopted AI reviews in two stages of the review process. I agree, we have to handle reviewer overload, but I don't think AI reviews are beneficial at all for our scientific progress. If our paper gets accepted at #AAAI26, I will review our AI-generated review here 🤠
3
4
17
3,397
Daniel Gruss retweeted
Ever wondered how to not generate random numbers for a mitigation? Check out our new paper TDXploit: fabianrauscher.com/papers/td… We break the single-stepping mitigation of Intel TDX and show Flush+Flush on TDX private memory!
1
3
1
9
1,214
Daniel Gruss retweeted
Good Morning! Hope to see you all at the show! As a reminder: 10AM Track 1 @ DEFCON
3
10
4,454
Congratulations Dr. @redrabbyte! It was great to have you in our team and I am proud of you that you have completed this journey with an excellent PhD thesis. Your works will have lasting impact on the community and I wish you the best for your next endeavors!
1
1
12
1,356
[New Paper] "Towards Explainable Drift Detection and Early Retrain in ML-Based Malware Detection Pipelines" - My first paper with one of my students as the main author. Congrats to Jayesh for his presentation today at DIMVA! Check the paper here: marcusbotacin.github.io/publ…
1
2
7
1,042
Congratulations Dr. @notimaginary_! It was a pleasure to take part in your journey and I am really proud of you! Outstanding thesis and defense - you absolutely deserve the PhD! All the best for your future! You can all check out Jonas' PhD thesis here: jonasjuffinger.com/phd-thesi…
1
14
1,601