Oleksii Oleksenko
@oleksii_o
Followers
248
Following
415
Media
13
Statuses
197
Senior Researcher at Azure. Work on microachitectural security and trusted execution environments. Proudly #Ukrainian BlueSky: @oleksii-o.bsky.social
Cambridge, UK
Joined February 2016
I'm moving ➡️ Mastodon: * Find me at @oleksii_o@infosec.exchange ( https://t.co/xMiGlqL3zv) * BlueSky bridge at @oleksii-o.infosec.exchange.ap.brid.gy
0
0
0
Oh! 37 new bugs (28 new CVEs) discovered in 5 RISC-V CPUs (e.g., BOOM and CVA6)! #Cascade fuzzes #RISC-V CPUs based on novel basic principles. Try it on your own CPU, it’s open! https://t.co/5JwUKghZ5L (with @K_CeesaySeitz @kavehrazavi)
5
33
116
No More Speculation: Exploiting CPU Side-Channels for Real by @akrasuski1
https://t.co/2Yr2ihQSs4
bughunters.google.com
CPU vulnerabilities are a widespread problem, yet they are not well understood and are generally hard to mitigate. Some of these vulnerabilities affect nearly all modern processors, regardless of...
2
95
257
Great to see the fix applied so quickly... ... although some sort of acknowledgement of the people who discovered the speculative leak (as well as the flaw in the original patch) would have been nice 🙄
Linux Reworks AMD Zen 1 Divide-By-Zero Mitigation After Original Fix Inadequate https://t.co/FQ1XuB2FzR
0
2
7
The first Linux kernel patch for a speculative leak found by our fuzzer Revizor:
phoronix.com
After a rather busy Patch Tuesday with the AMD Inception vulnerability and Intel Downfall going public, the Linux kernel saw a new bug fix merged today for a different issue..
0
2
13
More speculative vulns @USENIXSecurity! Check out @vanema94's talk: he presents the first fuzzer to detect undocumented #Meltdown-type leaks Results: (1) brand-new type of speculation on AMD Zen+; (2) new variant of MDS; (3) formal models for lots of known leaks More in thread👇
Now that the embargo is finally lifted🥳: I'm excited to share details about our most recent work (appearing at USENIX this week) on modeling and testing microarchitectural information leakage of CPU exceptions (think Meltdown 👻and alike).
0
1
14
Let's use random black-box testing to find some *new* Spectre leakage. "Aren't most random test cases useless?" Well, with 1) efficient pre-filtering 2) principled test case generation large-scale testing campaigns become practical. [Hide&Seek👻, by @oleksii_o ] #SP23
1
2
11
Revizor automatically detects microarchitectural leakage in CPUs, speeding up discovery of vulnerabilities that previously required persistent hacking and painstaking manual labor. This new tool helps the industry protect customers from risk:
0
24
70
Author order on academic papers is important! My Google friends and I spent lots of time thinking about this critical issue (the scores of our ICML submissions show this is time well spent) We distill our findings for the community here: https://t.co/W4kLLhYn1m Comments welcome!
9
57
377
In this issue: A new tool helps find speculative leaks in commercial CPUs; Data Science Summer School; and a conversation on how AI can improve carbon sequestration:
0
3
10
@socialboris This paper is related to the previous announcement: "Revizor" was the original paper presenting the methodology of contract-based testing, whereas "Hide&Seek" shows a set of techniques to make the testing much faster, and which enabled us to find new speculative leaks in x86 CPUs
0
0
1
More announcements! Our paper on testing for speculative leaks in black-box CPUs was selected for IEEE Micro Top Picks! Joint work with @socialboris, Mark Silberstein, and Christof Fetzer.
Our paper "Revizor: Testing Black-box CPUs against Speculation Contracts" was accepted to @ASPLOSConf 22! In a nutshell: Are you tired of not knowing if your CPU contains uarch vulnerabilities (Spectre, MDS, LVI, etc)? Sick of ... [1/3]
1
3
36
👻 is back! Excited to announce "Hide and Seek with Spectres", our paper accepted to @IEEESSP'23. We present a tool for fast discovery of spec. vulnerabilities in x86 CPUs, and two new speculative leaks we found. 📑arXiv: https://t.co/PftIBZXhrI 🔬tool: https://t.co/74zmUR6yrS
2
28
91
Even more ways to help:
linktr.ee
How can I help? Here's a list of resources curated by RazomForUkraine.org
0
0
0
Are you're reading the 🇺🇦 war news and thinking: "I wish I could do something about it"? You can! * Support the resistance financially: https://t.co/ruxvNxOdAV * Join a local protest to push your government to support Ukraine Every contribution matters!
1
1
1
#StopRussianAggression #StandWithUkraine #StopRussia EN: Russia launched a missile strike on Vasilkov, Kyiv region. The oil depot in the city is on fire right now:
Росія нанесла ракетний удар по Василькову Київської області. Прямо зараз у місті горить нафтобаза:
0
1
0
Dear friends demand No-Fly Zone over Ukraine. This practice was used earlier in Libya in 2011 when NATO suspended all flights over the country’s territory. This crucial military action should be introduced to protect Ukraine from Russian jets, drones, and missiles.
206
2K
7K
I used to live there, my beloved family still there 💔😔#StopRussianAggression #StopRussiaNow #UkraineCrisis
Kyiv now. But we are still strong. And we’ll fight. There are millions of people living in the capital of Ukraine. Our children are hiding in bathrooms and cellars.
0
1
3