Gianluca Scopelliti

#AcademicChatter #AcademicX #AcademicTwitter #HNY2025

This is a great paper on the status of remote attestation of confidential VMs in public clouds. tl;dr None allow you to verify that you run the OS you think you do. Shoutout to AWS for a reproducible build of their firmware! systex24.github.io/papers/systex2… #tdx #sev #aws #azure #gcp

"Understanding Trust Relationships in Cloud-Based Confidential Computing": a great paper by @gianlu33 et al. on whether you can trust big CSP's remote attestation for confidential computing. (Spoiler: you can't.) Slides and paper: bobspot.org/publications

Intel HW is too complex to be absolutely secure! After years of research we finally extracted Intel SGX Fuse Key0, AKA Root Provisioning Key. Together with FK1 or Root Sealing Key (also compromised), it represents Root of Trust for SGX. Here's the key from a genuine Intel CPU😀

Trying to finish my PhD but my PhD is trying to finish me.

How I published 1 first-author paper during 2.5 years of my post-doc: - I collected all my data and learned how to become a scientist. - I read like a normal human being. - I write like a normal human being. Seems to be paying off.

my favourite turn based strategy game

For the first time since the Halloween Solar Storms of 2003 we have now officially reached the Extreme G5 geomagnetic storm threshold at 22:54 UTC. With an observed Dst at -348 this is now one of the all-time strongest geomagnetic storms of the modern era only rivaled by the Halloween Solar Storms of 2003 and the 1989 storm that knocked out power grids in Quebec. You are witnessing space weather history today... and it isn't over yet. Sky watchers in the USA, this is your ultimate chance to see aurora from states like California and Texas. Do not miss out on this opportunity!

The videos of @NDSSSymposium #NDSS24 are finally available. Enjoy a (re-)watch of the keynotes and check out the presentations of your favorite papers!

Microsoft engineer: 500ms lag in liblzma? Something's up. Also Microsoft engineer: 45 minute lag in Microsoft Teams? Perfect.

Me finding out my abstract was selected for a conference talk vs me every day since thinking I have to actually give a talk

Quick announcement: my paper "Efficient and Timely Revocation of V2X Credentials" has been accepted at @NDSSSymposium'24! Looking forward to presenting my work in San Diego next February✈️ Many thanks to my co-authors Christoph Baumann, @FritzAlder, @eddytruyen and @jtmuehlberg

This was taken in 2016 in the Arctic Ocean. I was inspired by eight million voices from around the world calling for Arctic protection. Today is Earth Day and there's still an urgent need of help to support the work in the environmental movement. #EarthDay

Check out our paper (just accepted at @ACMDL TOPS) on using TEEs like #IntelSGX, #ARMTrustZone and #Sancus to enhance security in cyber-physical systems. Huge thanks to @FritzAlder, @jtmuehlberg, @SepidehPouyan and all the others involved in this project. dl.acm.org/doi/10.1145/35…

I hacked into a @Bing CMS that allowed me to alter search results and take over millions of @Office365 accounts. How did I do it? Well, it all started with a simple click in @Azure… 👀 This is the story of #BingBang 🧵⬇️

How NOT to use ChatGPT (as an academic):

The recent WhatsApp accounts takeover is simple and genius. This is how it works: You're sleeping. A "hacker" tries to login to your account via WhatsApp. You get a text message with a pincode that says "Do not share this". You don't share it, yet you still get hacked. How?

Our ESRs have presented their work via splashing posters and demonstrations at the recent Ericsson Security Research day in Stockholm.