I'm happy to announce our work has been accepted at ESORICS 2026: "A Systematic Look at Quality-of-Service Feature Effects on Side Channels in AMD SEV-SNP" Thanks to Carina Fiedler, @rayiizzz.bsky.social, @supersingular.bsky.social, @misc0110.bsky.social, and @gruss.cc for a fun collaboration!
Hannes Weissteiner
@hannesweissteiner.com
PhD Candidate at @isec-tugraz.bsky.social. Playing CTF with LosFuzzys
Greetings from DIMVA'26! 😎☀️ Last week, our researchers @rolicz.bsky.social, Stefan Gast, @hannesweissteiner.com and master student Tobias Weiser travelled to Chania, Greece. They attended the @dimvaconf.bsky.social and presented their papers:
Check out this article about ❄️ "FROST: Fingerprinting Remotely using OPFS-based SSD Timing", a paper by our PhD student @hannesweissteiner.com ❄️The article: arstechnica.com/security/202... ❄️The paper: hannesweissteiner.com/pdfs/frost.pdf
Websites have a new way to spy on visitors: Analyzing their SSD activity
Telltale SSD activity can be measured in the browser using simple JavaScript.
arstechnica.com
Announcing my latest first-author paper, accepted to #DIMVA2026: ❄️ FROST: Fingerprinting Remotely using OPFS-based SSD Timing.
Our PhD students, Carina Fiedler, @snee.la and @hannesweissteiner.com attended the NDSS Symposium 2026 in San Diego, California, this week to present their papers! Check them out in the thread 👇
I'm looking forward to presenting my paper, "Continuous User Behavior Monitoring using DNS Cache Timing Attacks" at NDSS next week! We mount an Evict+Reload-style attack on the local DNS cache, detecting recently accessed domains and evicting to continuously monitor new accesses.
I'm excited to announce that my first first-author paper is accepted at NDSS 2026 🥳. Eviction Notice: Reviving and Advancing Page Cache Attacks Check it out at: snee.la/posts/evicti... @snee.la, @notimaginary.bsky.social, Lukas Maar, @gruss.cc from @isec-tugraz.bsky.social, @tugraz.bsky.social
Eviction Notice: Reviving and Advancing Page Cache Attacks
Foreword This blog post is a summarized and introductory write up of our paper recently accepted at NDSS 2026, “Eviction Notice: Reviving and Advancing Page Cache Attacks”. Read the full paper here. A...
snee.la
Join us tomorrow for the InfoSec + SSD Christmas special, featuring real-world exploits, live hacking of various targets, information leaks, file formats, and a review of the year in security. 📅 December 17th, 2025 | 17:30 📍 Lecture Hall HS i13, Inffeldgasse 16b
We got 9th place at @defcon.bsky.social #CTF! Props to all finalists for an intense fight over the past three days and congrats to MMM for taking the win. Thanks to Nautilus Institute for the neat setup this year, we had a blast. Until next time, Vegas! #DEFCON #DEFCON33
I am happy to announce that my first paper has been accepted at USENIX Security! We propose TEEcorrelate, a mitigation that statistically decorrelates reported performance counters from real ones during TEE execution.
hannesweissteiner.xyz
I'm very happy to announce our new Cohere+Reload: Re-enabling High-Resolution Cache Attacks on AMD SEV-SNP was accepted at DIMVA 2025! In it @snee.la, @gruss.cc and I investigate AMD's ciphertext coherence mechanism and show even low resolution leakage can go a long way. Paper preview: cr.giner.cc
cr.giner.cc