Ivan Puddu

Very exciting to see the @ETH_en president, @Joel_Mesot, talk about our work at the Swiss Cyber Security Days 2024 🚀+Phone (plusphone.org) is based on TEEtime: an open and secure smartphone architecture without compromises in functionality @shw3ta_shinde @SrdjanCapkun

As a first step, we have built TEEtime. Users can now run secure apps in a domain that is not controlled by the OS, without trading off the protections provided by OS vendors. Win-win! Joint work with a fantastic team @SrdjanCapkun @dn0sar @Mark_Ku96 Paper arxiv.org/abs/2211.05206

Paper and presentation available here: usenix.org/conference/use…

The effect is more noticeable with memory writes: e.g. a memory write instruction at address 0x6 tends to execute slower than one at 0xe (mod 16), with the difference being up to 100 cycles on average, as shown below in a figure from our proof-of-concept. github.com/dn0sar/frontal…

In our paper to appear @USENIXSecurity 21, we observe that when frequently issuing interrupts, instructions execution times correlate with their virtual address (mod 16). We used this to exploit SGX enclaves. \w Moritz Schneider @M__Haller @SrdjanCapkun arxiv.org/abs/2005.11516

@kennwhite @USENIXSecurity We used our attack to exploit the mbedTLS and the Intel IPP cryptography library. We only tested the defense on OpenSSL, but not the attack. We did not notice this error on the conclusion until now, but we are updating the version on arXiv to fix this.

@jovanbulck @lavados @thorstenholz @bpreneel1 Congrats Jo!

Very glad to have concluded my PhD "Microarchitectural Side-Channel Attacks for Privileged Software Adversaries". Many thanks to everyone and esp to my fantastic jury @lavados, @thorstenholz, @bpreneel1, Wouter Joosen, and Frank Piessens! jovanbulck.github.io/files/phd-thes…

@danielmgmi It’s fine, you can just take it back. Ah no wait.. unfortunately things will never be quite the same

I have a CPU speculation joke, but security folks took it the wrong way

Intel are disclosing 77 vulns today (blogs.intel.com/technology/201…), some in their CPUs - HW bugs are always painful, but hardware is never perfect. Happy to see TAA disclosed after I found it >1y ago, but @dkg0414's page size issue looks a lot more painful. JCC icache errata too.

修理方法ぶっ飛び過ぎやろ。中国のiPhone修理屋さん。

After enough hours of sleep it's time to announce that we got the 5th place at @oooverflow #DEFCON CTF as the best European team! Congrats to PPP (@PlaidCTF) for collecting more black badges this year and hosting us at the after-party, you guys are awesome! 🚩 #DEFCON27 #CTF

Dan Goodin @dangoodin001 has covered our research on aircraft landing systems as one of @arstechnica today's feature stories. twitter.com/arstechnica/st… Thank you @ihackedwhat, @dalfry for the comments. Thank you @dangoodin001 for the fantastic report.

ETH doctoral students of #computer science show how linking two popular technologies can have highly problematic consequences for web services such as e-voting systems. ethz.ch/en/news-and-ev…

Wie sich elektronische Abstimmungen kaufen lassen. Die ETH-Studie zu Crowdturfing und E-Voting aus der gestrigen Zeitung tagesanzeiger.ch/schweiz/evotin… ist mittlerweile erschienen. Hier: arxiv.org/pdf/1903.00449… verfasst von @dn0sar et al.

Our entire team at the #riscv summit. From the left - Michael, Florian, Alex The Bear 🐻, Ivan, Moritz, and Matheus. Look @LucaBeniniZhFe they are all wearing the #PULP t-shirts 👕. @ms_snowman @be4web @suehtamacv

if you think of the word “brainstorm” you hear the word brainstorm. if you think of the words “green needle” you hear green needle.

Hey hackers! We survived our first @DEFCON #CTF and ended up in 7th place! Congratz to DEFKOR00T for eating maccheroni and to @oooverflow for such a nice competition! /CC @towerofhanoi @c00kiesATvenice @n0pwnintended @TheRomanXpl0it @JBZTeam

Battle ships via a state channel. Work in progress 💪🏻💪🏻💪🏻🙆🏻‍♀️ #ethic3bootcamp

#IntegriKey: a new way to make sending messages safe, even in a #hostile environment! First product of its kind on the market: #WANTED academics and industrial partners for further development. @SrdjanCapkun syssec.ethz.ch bit.ly/IntegriKey

Email triage strategy - Not important: mute - Important: answer immediately - VERY IMPORTANT: wait until I can answer in detail, oh no it's been a month and I still haven't answered, oh god it's been another month, maybe I can change my name and move to Alaska