SNeela

ALRIGHT! I'm VERY excited to announce this research, because we've been holding onto it for close to a year now! Announcing File Notification Attacks! Side-Channel Leakage from the File-Notification System on #Linux, #Android, #Windows, and #macOS We've found decades-old bugs on Linux, Android, and Windows... well technically Microsoft considers what we found an ✨ undocumented feature ✨ (got Microsoft nominated for the lamest vendor response #pwnie award haha). There's SO much to talk about, so please expand this thread below, but you can also check it out yourself at: https://inoti.fyi/ There's a #noAI logo that my sister drew there. Our work was accepted at #CCS 2026, and I'll be presenting it this November at The Hague, Netherlands! If you're there, we should totally meet up :D Thanks to my AWESOME co-authors: Xufan Zhao, Jeanette Angelika Wultsch, @hweissi@infosec.exchange, Florian Draschbacher, @notbobbytables@infosec.exchange, and @lavados@infosec.exchange 🙏, all of us from @isec_tugraz@infosec.exchange, TU Graz #security #cybersecurity #research #systems

Chonk & mini-Chonk of Mastodon meet Konqi of KDE! @kde @akademy@floss.social#akademy2026 #kde #akademy #plushtodon

@lattera@bsd.network @hweissi@infosec.exchange @notbobbytables@infosec.exchange @lavados@infosec.exchange @isec_tugraz@infosec.exchange back when we were doing the research, inotify wasn't implemented in BSD yet, so we didn't test it. Kqueue existed (ofc still exists), but it didn't make sense to test it because it didn't fit the threat model IIRC. But I'd be interested to know about the results of inotify :D

I'm happy to announce our work has been accepted at ESORICS 2026, going to be held at Rome, Italy in September later this year! "A Systematic Look at Quality-of-Service Feature Effects on Side Channels in AMD SEV-SNP" In our work, we show that AMD CPUs' Quality of Service features introduce and amplify side channels, especially concerning in the confidential computing / trusted execution paradigm of computing. We show that a malicious hypervisor can use allocation and monitoring features to leak and amplify what's going on in an AMD SEV-SNP confidential VM. The hypervisor can mount keystroke detection attacks, website fingerprinting attacks, Bleichenbacher attacks on RSA, and covert channels. We reported our findings to AMD, who said that "side channels are not in their threat model for SEV-SNP"... 🙂. I have a blog write up here (there's a logo of a cat wearing a business tie - no AI): https://snee.la/posts/amd-qos-side-channels/ You can read the paper at: https://snee.la/pdf/pubs/amd-qos-side-channels.pdf Thanks to Carina Fiedler, @Rayiizzz@infosec.exchange, @supersingular@chaos.social, @misc0110@infosec.exchange and @lavados@infosec.exchange for the fun collaboration! #esorics2026 #confidentialcomputing #amd #security #cloud #computing #cloudcomputing

Yesterday evening, the moon had this wonderful red-orange color to it. Using my brand new Tamron 300mm lens, I took this beautiful shot with my Sony Alpha 6500. ISO 100 Exposure Time: 6/10 of a second

Keep Android Open: https://keepandroidopen.org #KeepAndroidOpen

@Cenbe@techhub.social unless you jest (due to the plush shape), Konqi is dragon :D