iiinova — where your digital self keeps evolving

Reposted by Daniel Gruss

Sudheendra Raghav Neela @snee.la · 27/07/2026

I'm happy to announce our work has been accepted at ESORICS 2026: "A Systematic Look at Quality-of-Service Feature Effects on Side Channels in AMD SEV-SNP" Thanks to Carina Fiedler, @rayiizzz.bsky.social, @supersingular.bsky.social, @misc0110.bsky.social, and @gruss.cc for a fun collaboration!

156

Reposted by Daniel Gruss

Hannes Weissteiner @hannesweissteiner.com · 20/05/2026

Announcing my latest first-author paper, accepted to #DIMVA2026: ❄️ FROST: Fingerprinting Remotely using OPFS-based SSD Timing.

276

Reposted by Daniel Gruss

Hannes Weissteiner @hannesweissteiner.com · 20/05/2026

We measure SSD contention using the Origin-Private File System (OPFS), which allows any website to use up to 10GB (Firefox), or 60% of total disk space (other browsers), from JavaScript, without any user interaction or special permissions.

121

Daniel Gruss @gruss.cc · 14/05/2026

Congratulations Dr. @responsible.fyi! Thank you for the 6 years in my teaching and then research team! You're a great teacher and researcher! I am incredibly proud and impressed by your excellent PhD thesis, great papers, and the independence you got! All the best for your next endeavors!

060

Reposted by Daniel Gruss

Hannes Weissteiner @hannesweissteiner.com · 22/02/2026

I'm looking forward to presenting my paper, "Continuous User Behavior Monitoring using DNS Cache Timing Attacks" at NDSS next week! We mount an Evict+Reload-style attack on the local DNS cache, detecting recently accessed domains and evicting to continuously monitor new accesses.

162

Reposted by Daniel Gruss

Ruiyi Zhang @rayiizzz.bsky.social · 15/01/2026

Today we reveal StackWarp: a new CPU vulnerability exploiting a synchronization bug in AMD’s stack engine across Zen 1–5 CPUs. It enables deterministic manipulation of Confidential VM's stack pointer, allowing RCE and privilege escalation via both control- and data-flow hijacking.

13213

Daniel Gruss @gruss.cc · 07/01/2026

I just registered for uasc.cc -- uASC (the Microarchitecture Security Conference) is on February 3rd, in Leuven, Belgium. **Registration is free but mandatory!** I would be happy to see all of you there :) Especially from the Cologne and Ruhr area, it's just a train ride to Leuven -> join us!

uasc.cc

2nd Microarchitecture Security Conference (uASC '26)

071

Daniel Gruss @gruss.cc · 26/12/2025

I'll arrive at the #39c3 tomorrow evening, see you there!

120

Reposted by Daniel Gruss

Veelasha Moonsamy @veelasha.bsky.social · 15/09/2025

DIMVA is looking for PC nominations! Feel free to nominate yourself or your peers! 💯 [mark your calendar] DIMVA 2026 will be held in Chania, Greece, July 1 - 3, 2026 🏖️🌞 Daniele Cono D'Elia and I look forward to your submissions!🥳

021

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 04/09/2025

Later in the morning, Jo van Bulck gave an insightful talk about attacking and defending Trusted Execution Environments (TEEs) and the evolution of confidential computing. #GSW25 #TEE

052

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 05/09/2025

Thursday evening, @gruss.cc hosted a city tour, showing off the best spots in the inner city, climbing the "Schlossberg," and surprising first-time visitors and locals alike with many fun facts! #GSW25 #Graz

021

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 05/09/2025

This morning, David Oswald started our last day at GSW with his talk "Breaching the Gates: Uncovering Hardware Weaknesses in Confidential Computing", giving an overview of power side-channels and fault attacks in confidential computing scenario. #GSW25 #sidechannels

031

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 03/09/2025

In our second morning session, Stefan Mangard and @gruss.cc spoke about side-channel attacks in various settings - from phones to computers to networks - showing that side channels really are everywhere. #GSW25 #SideChannels

032

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 03/09/2025

Social Event Part 1: Trip to the @zotterchocolates.bsky.social chocolate factory! We tasted our way through the factory with over 40 chocolate stations, experiencing the whole production process from the cocoa bean to the delicious end product! 😋🍫 #GSW25 #chocolate

021

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 03/09/2025

Social Event Part 2: Our culinary adventure continues! For dinner we went to a traditional Styrian "Buschenschank", a restaurant serving cold spreads made of local foods and their own wine and juices. 😍 #GSW25 #buschenschank

011

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 02/09/2025

For our first session today, Fabio Pierazzi talked about trends and challenges in AI for systems security. What an exciting start to Day 2 of GSW'25! #GSW25 #AI #SystemSecurity

082

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 02/09/2025

In our second session, Christian Rossow shared an overview of CFI techniques and developments and showed which areas still need further research to improve the guarantees CFI can provide and the compatibility with language constructs. #GSW25 #CFI #Cybersecurity

031

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 02/09/2025

This afternoon, our student team LosFuzzys hosted the Graz Security Week CTF! To keep the spirits high and minds sharp, we provided some pizza. ✨🍕 Congratulations to all winners! 🥳 1st place: "Computerclub St. Pölten (not)" 2nd place: "Zotter Fanclub" 3rd place: "Polund" #GSW25 #CTF

A room full of people doing CTF challenges

021

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 01/09/2025

In the afternoon, we continued with "Advanced Branch Target Injection Attacks" by Kaveh Razavi: An awesome talk about how branch target injection aka spectre v2 attacks evolved since 2018! #GSW25 #spectre

041

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 01/09/2025

Our last session of the day: The PhD Forum—here our participants got the chance to share their research in short 5-min presentations! Hopefully, this will help them to get connected with others working on similar topics and spark some interesting discussions this week! #GSW25 #PhD #research

031

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 01/09/2025

Here we go! Graz Security Week is starting any minute now! 🥳

031

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 01/09/2025

Welcome to Graz! We wish you a great week. 😎

051

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 01/09/2025

We're kicking-off our summer school Graz Security Week with a short introduction and our first talk by Maria Eichlseder about Lightweight Cryptography and its challenges. #GSW25 #lightweight #cryptography

061

Daniel Gruss @gruss.cc · 23/07/2025

Congratulations Dr. @giner.cc! It was great to have you in our team and I am proud of you that you have completed this journey with an excellent PhD thesis. Your works will have lasting impact on the community and I wish you the best for your next endeavors!

1202

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 12/07/2025

🎉 Congratulations to @notimaginary.bsky.social! 🎉 This week, he defended his PhD thesis “Attacking and Securing Leaky Systems at the Hardware-Software Boundary.”! We’re so excited for you and wish you all the best for the future!🌟 Check out the thesis here 👇 www.jonasjuffinger.com/phd-thesis.pdf

061

Daniel Gruss @gruss.cc · 08/07/2025

Congratulations Dr. @notimaginary.bsky.social! Was a pleasure to take part in your journey and I am really proud of you! Outstanding thesis and defense - you absolutely deserve the PhD! All the best for your future! You can all check out Jonas' PhD thesis here: www.jonasjuffinger.com/phd-thesis.pdf

090

Daniel Gruss @gruss.cc · 08/07/2025

If you're looking for something to do before or after #dimva25 in #graz, maybe hike up the Schöckl (1445m) www.bergfex.at/sommer/steie...

050

Reposted by Daniel Gruss

µASC Conference @uasc.cc · 19/05/2025

uASC 2026 will take place on February 3, 2026, in Leuven, Belgium, hosted by KU Leuven. We can't wait to see you next year! Cycle 1 Paper Submission Deadline is July 15, 2025! 👉 uasc.cc #uasc26

0109

Reposted by Daniel Gruss

µASC Conference @uasc.cc · 17/06/2025

Only one month left to submit your paper for the first submission cycle at uASC 2026! 📅 Submission Deadline: July 15, 2025 👉 uasc.cc #microarchitecture #security #conference #uasc26

047

Daniel Gruss @gruss.cc · 16/06/2025

Join the Graz Security Week from Sep 1 to 5! with @sahar-abdelnabi.bsky.social, Jo Van Bulck, Maria Eichlseder, Georg Fuchsbauer, @sublevado.bsky.social, @fbpierazzi.bsky.social, Kaveh Razavi, Christian Rossow, Yang Zhang securityweek.at (system security, side channels, AI security, & cryptography)

securityweek.at

Security Week Graz 2025 – Summer School for Cybersecurity

2105

Reposted by Daniel Gruss

Hannes Weissteiner @hannesweissteiner.com · 13/06/2025

I am happy to announce that my first paper has been accepted at USENIX Security! We propose TEEcorrelate, a mitigation that statistically decorrelates reported performance counters from real ones during TEE execution.

hannesweissteiner.xyz

3228

Reposted by Daniel Gruss

Lukas Giner @giner.cc · 26/05/2025

Special thanks to @0xhilbert.bsky.social for the many discussions!

011

Reposted by Daniel Gruss

Lukas Giner @giner.cc · 26/05/2025

We find that AMD does ciphertext coherence with cache line granularity, but instead 32 cache lines (half a page)! And even crazier, it's not 32 adjacent cache lines, but they're spread over a page in varying patterns: each accessed line evicts all others in its half of the page.

111

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 22/05/2025

Thanks for braving the weather and visiting us at Open Day last month! ☔😊

021

Reposted by Daniel Gruss

Ruhr-Universität Bochum @ruhr-uni-bochum.de · 22/05/2025

Millionenförderung für unsere Exzellenzcluster! 🎉 Wir gratulieren den Forschenden der Cluster CASA und @solvationsci.bsky.social zu ihrem verdienten Erfolg.

Weiße Schrift auf rosa Hintergrund: "Millionenförderung für unsere Exzellenzcluster!"

23810

Daniel Gruss @gruss.cc · 21/05/2025

DIMVA is taking place July 9 to 11 in Graz! We offer diversity grants for participants who identify as women, non-binary, or belong to other underrepresented groups in IT security. Each grant covers a total of up to 800€. Applications are open until May 31, 2025. See dimva.org/dimva2025/#d...

dimva.org

22nd Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA '25)

053

Reposted by Daniel Gruss

SAFARI Research Group @safari-eth.bsky.social · 17/05/2025

🏆 We're excited to announce that @agyaglikci.bsky.social has been awarded the DSN-2025 William C. Carter PhD Dissertation Award in Dependability. 🎉Congratulations, Giray! 🌠 safari.ethz.ch/abdullah-gir... agyaglikci.github.io @omutlu.bsky.social 🔨 #RowHammer #DRAM #security #dependability #DSN2025

032

Reposted by Daniel Gruss

Eoin Higgins @eoinhiggins.bsky.social · 15/05/2025

NYU student speaker at graduation addresses Palestine; school is withholding his diploma for his speech www.nyu.edu/about/news-p...

39374161

Reposted by Daniel Gruss

Gianluca Stringhini @gianlucastringhini.com · 21/04/2025

I had two NSF grants terminated last week, for a total of just under $1M. The largest one had just started and its goal was to provide users with more context and information on the content that they see on social media.

1027372

Reposted by Daniel Gruss

University of Graz @uni-graz.at · 14/04/2025

🇺🇸 Eine Auswertung von acht Millionen politischen Reden unter Beteiligung der #unigraz zeigt: Nie zuvor wurde im US-Kongress so viel nach persönlichen Überzeugungen argumentiert – und so wenig nach #Fakten: 🔗 www.uni-graz.at/de/neuigkeit... #weworkfortomorrow #universityofgraz

1184

Reposted by Daniel Gruss

Lukas Giner @giner.cc · 03/04/2025

I'm very happy to announce our new Cohere+Reload: Re-enabling High-Resolution Cache Attacks on AMD SEV-SNP was accepted at DIMVA 2025! In it @snee.la, @gruss.cc and I investigate AMD's ciphertext coherence mechanism and show even low resolution leakage can go a long way. Paper preview: cr.giner.cc

cr.giner.cc

2165

Reposted by Daniel Gruss

Radley Balko @radleybalko.bsky.social · 30/03/2025

NYU canceled a planned speech by the former president of Doctors Without Borders because she planned to discuss the humanitarian crisis in Gaza and cuts to US AID. This is what actual campus censorship looks like.

ctvnews.ca

‘Climate of fear’: Montreal doctor says NYU cancelled her presentation

A Montreal doctor says her presentation at NYU was abruptly cancelled and believes the university did so out of fear of being pressured by the Donald Trump administration.

22391223900

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 06/03/2025

Congratulations to PhD Candidate Aikata for winning the Critical Infrastructure Award by @oeaw.bsky.social! 🎉 The CI Award recognises young scientists for outstanding achievements related to safety-critical infrastructures in the context of their PhD studies. ✨ 📸: Daniel Hinterramskogler

141

Reposted by Daniel Gruss

ISEC TU GRAZ @isec-tugraz.bsky.social · 27/02/2025

Last week, @gruss.cc and his PhD students went to Germany and visited #µASC and #RuhrSec! PhD candidate @notimaginary.bsky.social presented his paper “An Analysis of HMB-based SSD #Rowhammer”. 📑👇 uasc.cc/proceedings2... #Microarchitecture #security #informationsecurity #cybersecurity #conference

074