
Step by step description on bypassing stack canaries: we have a new blog, and an excellent post by @fkaasan assisted by @m4mbr3 and @sigusr0 ibm.github.io/system-securit…
Alessandro Sorniotti
42 posts

@sigusr0
Security research @IBMResearch. Husband, father. Jogger.

Step by step description on bypassing stack canaries: we have a new blog, and an excellent post by @fkaasan assisted by @m4mbr3 and @sigusr0 ibm.github.io/system-securit…



How do synchronization primitives work during speculative execution? THEY DON'T! Disclosing #GhostRace (paper @USENIXSecurity). We turn all arch. race-free critical regions of OS/Hypervisors into Speculative Race Conditions. Joint work @vu5ec @IBMResearch: vusec.net/projects/ghost…

What an awesome #NDSSSymposium2024! Over 4000 emails, more than half in the last two weeks. Over 1500 HotCRP comments. Over 600 attendees, 140 paper presentations across three parallel sessions, and two amazing keynotes. 10/10, amazing experience, would do again (after a break)!


Very proud that "Rage Against The Machine Clear" won the Dutch cyber security best research paper award. All credits to @hanyrax and @b4rbito who did the actual work. @vu5ec @c_giuffrida @ACCSS_NL Paper: usenix.org/conference/use…








The Call for Papers for the 32nd USENIX Security Symposium is now available! The Summer deadline is June 7. View the CFP for more info, including important changes to the publication model: bit.ly/usesec23cfp








Thrilled to announce that @jsysresearch will feature two new areas from the next deadline (May 22) onwards! First, @gannimo has agreed to serve as Area Chair for a new Systems Security area! This is one of the areas requested most by authors. jsys.org/cfp_security/


