Verifying myself: I am rcze on Keybase.io. bPXsLAWrwRcyPa83Cinfcb7BuRMYl6dUDBpc / keybase.io/rcze/sigs/bPXs…

I'm super happy to share that our work "CustomProcessingUnit: Reverse Engineering and Customization of Intel Microcode" has been accepted at #WOOT23! 🎉 We extend our #BHUSA work to show how microcode tracing and patching can be useful to improve CPU performance and security 👀

Honored to receive best paper award for our CustomProcessingUnit paper at WOOT! Check out our static and dynamic analysis frameworks for Intel microcode 😃 Shout out to Pietro Borrello (1st author and newly minted Dr 🎓), @marv0x90, Roland Czerny, Michael Schwarz for this awesome collab

Our new paper "Generic and Automated Drive-by GPU Cache Attacks from the Browser" has been accepted at AsiaCCS! 🎉 We show basic cache attack primitives on NVIDIA&AMD, and more complex attacks on NVIDIA. You can read it and try a tiny POC here ginerlukas.com/gpuattacks/.

Sicherheitsleck in Browserschnittstelle für Grafikkarten aufgedeckt science.apa.at/power-search/7… TU Graz Lukas Giner Roland Czerny

Announcing #SnailLoad, a website- and video-fingerprinting attack via TCP connections, without any attacker code on the victim machine: snailload.com Great collaboration with Roland Czerny, @notimaginary, Fabian Rauscher, Simone Franza and Daniel Gruss (1/3)

🚨‼️ New security loophole allows spying on internet users visiting websites and watching videos ‼️🚨 The security loophole known as "SnailLoad" allows bypassing firewalls, VPN connections and browser privacy modes. No malicious code is required to exploit this vulnerability

Lukas Giner just received the Best Paper Award AsiaCCS 🎉Congrats to everyone that worked on the paper!!

Announcing #CounterSEVeillance, a novel attack on AMD SEV-SNP inferring control-flow information and operand properties from performance-counter data with single-instruction resolution. Thanks to Hannes Weissteiner, Robin Leander Schröder and Daniel Gruss for the amazing collaboration!

You may have heard about @Intel's horrific #Meltdown bug. But have you watched it in action? When your computer asks you to apply updates this month, don't click "not now." (via spectreattack.com & Michael Schwarz)