Herbert Bos
where else to find them
what they talk about
all 5 in the filters
where they keep going back
no series more than once — all 6 in the filters
on a stage with
all 23 in the filters
who talks about the same things
- Cristiano Giuffrida9 talks
- Erik Bosman3 talks
- Kaveh Razavi11 talks
- Daniel Gruss14 talks
- Ben Gras4 talks
- Michael Schwarz25 talks
| title | conference | date |
|---|---|---|
| Don't Look UB: Exposing Sanitizer-Eliding Compiler Optimizations | PLDI 2023 | 2023-06-17 |
Differential-testing framework LookUB compiles programs with sanitizers on with and without optimization to expose optimizer transformations that remove… | ||
| DUPEFS: Leaking Data Over the Network With Filesystem Deduplication Side Channels | FAST '22 | 2022-02-22 |
Shows a practical remote channel against ZFS inline deduplication that leaks OAuth access tokens from an nginx access log by exploiting timing differences… | ||
| Exploiting Hardware Glitches And Side Channels In Perfect Software | OWASP Global AppSec Amsterdam 2019 | 2019-09-23 |
Demonstrates concrete, bug‑free attacks: uses Rowhammer bit flips from JavaScript to change pointers and gain code execution in modern browsers (Edge/Chakra)… | ||
| Flip Feng Shui: Hammering a Needle in the Software Stack | USENIX Security '16 | 2016-08-10 |
A new exploitation vector uses Rowhammer plus kernel same-page merging (KSM) to induce single-bit flips at arbitrary physical addresses by forcing the victim… | ||
| Undermining Information Hiding (and What to Do about It) | USENIX Security '16 | 2016-08-10 |
Demonstrates that thread spraying forces many per-thread safe regions and reduces SafeStack entropy so an attacker locates a SafeStack found in 3 seconds… | ||
| Poking Holes in Information Hiding | USENIX Security '16 | 2016-08-10 |
Shows an allocation oracle attack that infers the sizes of unmapped address-space holes by repeatedly triggering large allocations and observing success or… | ||
| An In-Depth Analysis of Disassembly on Full-Scale x86/x64 Binaries | USENIX Security '16 | 2016-08-10 |
Measurement of nine disassemblers on 981 binaries uses DWARF/PDB plus an LLVM pass to create ground truth and finds IDA recovers 96–99% of instructions, linear… | ||
| Over the Edge: Silently Owning Windows 10's Secure Browser | Black Hat USA 2016 | 2016-08-03 |
Windows 10’s default-on memory deduplication yields a measurable write slowdown that is turned into a one-bit local side channel to recover 64-bit ASLR… | ||
| On Sockets and System Calls: Minimizing Context Switches for the Socket API | TRIOS ’14 | 2014-10-05 |
Implements exposed socket buffers (shared per-socket memory with two lockless queues) and pins the user-space network stack to its own core in NewtOS… | ||
| nothing matches | ||