Stefan Gast

I'm having a great time at #DIMVA2026 in Chania. 🙂 Today, @hweissi@infosec.exchange and @wayna@infosec.exchange from our group presented their papers "FROST: Fingerprinting Remotely using OPFS-based SSD Timing" and "Fast and Secure LLC Caches via Spatial Windows", respectively. Tomorrow, I will be presenting our mitigation against #SnailLoad-style attacks in "Client-Side Mitigation of Remote Latency Side-Channel Attacks". #DIMVA #DIMVA2026 #sidechannel #conference #Chania

@stacksmashing@infosec.exchange Years of retraining muscle memory, and this is what I get in return? 😅

@pinskia@hachyderm.io Thank you! 🙂

@pinskia@hachyderm.io Ah, so memory tagging will be back eventually. I was just confused, because the commit message and the release notes did not have much detail and I read this as a permanent change, possibly motivated by some larger issue. Thank you for the clarification! 🙂

@CanLehmann@mastodon.social @stacksmashing@infosec.exchange Good question. I mean, it has been deprecated for more than 10 years now, without any real consequences. 🤷‍♂️

@stacksmashing@infosec.exchange @CanLehmann@mastodon.social 🤣

@nixCraft It's kind of embarrassing, but I have to admit: I only learned this today from you, after more than 20 years of Linux experience. Thanks!

@ljs@mastodonapp.uk Congrats! 🥳

As usually the credits start scrolling by after this, I would like to take the opportunity to thank all the people who I had the honor to work with over the past 5 years and also those who supported me in other ways! While too many to mention everybody, thank you especially, @lavados@infosec.exchange, for being the best PhD advisor this graybeard PhD student could have wished for!

On that note, @lwn@fedi.lwn.net has published some background on their recent problems with #scraperbots, including how residential proxies work and why it's not just about blocking IP addresses: https://lwn.net/Articles/1080822/

@rostedt Thanks for this! It makes it much easier to create a custom config for newly bought hardware, when you can use this to obtain a reasonable seed. 🙂

Still not a web developer, but I think I have improved the look of my website a little bit:

@bert_hubert@eupolicy.social Programmers convert problems into code. Unfortunately, programmers also convert code into problems.

I am not familiar with it, but out of curiosity I am wondering why they removed memory tagging on aarch64. The corresponding commit says that it was somehow broken: https://sourceware.org/git/?p=glibc.git;a=commit;h=70be9819b5eb7ed0050cffb45113332f96f5a55f Does somebody have a nice link that explains the problem(s) in more detail?

@hweissi@infosec.exchange Isn't enshittification wonderful?

@tante@tldr.nettime.org Nice! The official statement can be found here, under "Distribution-wide Initiatives": https://www.gentoo.org/news/2026/01/05/new-year.html