Hannes Weissteiner

19 Aug

The registration for our summer school is closing soon. Don't miss out on all the cybersecurity shenanigans! Registration Deadline: 23. August 2026 www.securityweek.at #gsw26 #summerschool #cybersecurity

Hannes Weissteiner reposted

Sudheendra Raghav Neela

@snee.la

27 July

I'm happy to announce our work has been accepted at ESORICS 2026: "A Systematic Look at Quality-of-Service Feature Effects on Side Channels in AMD SEV-SNP" Thanks to Carina Fiedler, @rayiizzz.bsky.social, @supersingular.bsky.social, @misc0110.bsky.social, and @gruss.cc for a fun collaboration!

Hannes Weissteiner reposted

8 July

Greetings from DIMVA'26! 😎☀️ Last week, our researchers @rolicz.bsky.social, Stefan Gast, @hannesweissteiner.com and master student Tobias Weiser travelled to Chania, Greece. They attended the @dimvaconf.bsky.social and presented their papers:

Hannes Weissteiner reposted

arstechnica.comWebsites have a new way to spy on visitors: Analyzing their SSD activityTelltale SSD activity can be measured in the browser using simple JavaScript.

29 May

Check out this article about ❄️ "FROST: Fingerprinting Remotely using OPFS-based SSD Timing", a paper by our PhD student @hannesweissteiner.com ❄️The article: arstechnica.com/security/202... ❄️The paper: hannesweissteiner.com/pdfs/frost.pdf

20 May

Announcing my latest first-author paper, accepted to #DIMVA2026: ❄️ FROST: Fingerprinting Remotely using OPFS-based SSD Timing.

20 May

We measure SSD contention using the Origin-Private File System (OPFS), which allows any website to use up to 10GB (Firefox), or 60% of total disk space (other browsers), from JavaScript, without any user interaction or special permissions.

hannesweissteiner.comFROST: Fingerprinting Remotely using OPFS-based SSD TimingI am a PhD Student in CoreSec at ISEC at Graz University of Technology as part of the CoreSec group. My research area is side-channel attacks and defenses.

20 May

The underlying mechanisms are platform-agnostic. This is a feature, not a bug! Read the paper here: hannesweissteiner.com/publications... Thanks to Tobias Weiser, @rolicz.bsky.social , @snee.la , @responsible.fyi , @notimaginary.bsky.social and @gruss.cc for the collaboration!

Hannes Weissteiner reposted

27 Feb

Our PhD students, Carina Fiedler, @snee.la and @hannesweissteiner.com attended the NDSS Symposium 2026 in San Diego, California, this week to present their papers! Check them out in the thread 👇

22 Feb

I'm looking forward to presenting my paper, "Continuous User Behavior Monitoring using DNS Cache Timing Attacks" at NDSS next week! We mount an Evict+Reload-style attack on the local DNS cache, detecting recently accessed domains and evicting to continuously monitor new accesses.

22 Feb

Our attack works from native code, even across virtual machines and containers. We also run the attack in the browser from a malicious website, using JavaScript or even scriptless HTML+CSS. Most underlying primitives are OS-agnostic! Read the paper here: hannesweissteiner.com/publications...

snee.laEviction Notice: Reviving and Advancing Page Cache AttacksForeword This blog post is a summarized and introductory write up of our paper recently accepted at NDSS 2026, “Eviction Notice: Reviving and Advancing Page Cache Attacks”. Read the full paper here. A...

22 Feb

Thanks to Roland Czerny, Simone Franza, Stefan Gast, Johanna Ullrich and @gruss.cc for the amazing collaboration!

Hannes Weissteiner reposted

Sudheendra Raghav Neela

@snee.la

16 Jan

I'm excited to announce that my first first-author paper is accepted at NDSS 2026 🥳. Eviction Notice: Reviving and Advancing Page Cache Attacks Check it out at: snee.la/posts/evicti... @snee.la, @notimaginary.bsky.social, Lukas Maar, @gruss.cc from @isec-tugraz.bsky.social, @tugraz.bsky.social

Hannes Weissteiner reposted

16 Dec 2025

Join us tomorrow for the InfoSec + SSD Christmas special, featuring real-world exploits, live hacking of various targets, information leaks, file formats, and a review of the year in security. 📅 December 17th, 2025 | 17:30 📍 Lecture Hall HS i13, Inffeldgasse 16b

Hannes Weissteiner reposted

KuK Hofhackerei

@hofhackerei.at

12 Aug 2025

We got 9th place at @defcon.bsky.social #CTF! Props to all finalists for an intense fight over the past three days and congrats to MMM for taking the win. Thanks to Nautilus Institute for the neat setup this year, we had a blast. Until next time, Vegas! #DEFCON #DEFCON33

hannesweissteiner.xyzhannesweissteiner.xyz

13 June 2025

I am happy to announce that my first paper has been accepted at USENIX Security! We propose TEEcorrelate, a mitigation that statistically decorrelates reported performance counters from real ones during TEE execution.

hannesweissteiner.xyzhannesweissteiner.xyz

13 June 2025

It protects against fine-grained performance-counter attacks on TEE's, while keeping coarse-grained trends intact for legitimate use cases. hannesweissteiner.xyz/pdfs/teecorr...