Cristiano Giuffrida
where else to find them
what they talk about
where they keep going back
no series more than once — all 5 in the filters
on a stage with
all 20 in the filters
who talks about the same things
- Erik Bosman3 talks
- Herbert Bos11 talks
- Kaveh Razavi11 talks
- Daniel Gruss14 talks
- Ben Gras4 talks
- Yueqi Chen6 talks
| title | conference | date |
|---|---|---|
| Don't Look UB: Exposing Sanitizer-Eliding Compiler Optimizations | PLDI 2023 | 2023-06-17 |
Differential-testing framework LookUB compiles programs with sanitizers on with and without optimization to expose optimizer transformations that remove… | ||
| Unwinding the Stack for Fun and Profit | Black Hat Europe 2022 | 2022-12-05 |
Claims that exception unwinding can be hijacked to restore return-based exploits using a technique called Chop (Handler Oriented Programming), which corrupts… | ||
| DUPEFS: Leaking Data Over the Network With Filesystem Deduplication Side Channels | FAST '22 | 2022-02-22 |
Shows a practical remote channel against ZFS inline deduplication that leaks OAuth access tokens from an nginx access log by exploiting timing differences… | ||
| Flip Feng Shui: Hammering a Needle in the Software Stack | USENIX Security '16 | 2016-08-10 |
A new exploitation vector uses Rowhammer plus kernel same-page merging (KSM) to induce single-bit flips at arbitrary physical addresses by forcing the victim… | ||
| Undermining Information Hiding (and What to Do about It) | USENIX Security '16 | 2016-08-10 |
Demonstrates that thread spraying forces many per-thread safe regions and reduces SafeStack entropy so an attacker locates a SafeStack found in 3 seconds… | ||
| Poking Holes in Information Hiding | USENIX Security '16 | 2016-08-10 |
Shows an allocation oracle attack that infers the sizes of unmapped address-space holes by repeatedly triggering large allocations and observing success or… | ||
| Over the Edge: Silently Owning Windows 10's Secure Browser | Black Hat USA 2016 | 2016-08-03 |
Windows 10’s default-on memory deduplication yields a measurable write slowdown that is turned into a one-bit local side channel to recover 64-bit ASLR… | ||
| nothing matches | ||