Oleksii Oleksenko

... on AMD CPUs, which bypasses VM isolation, kernel-user boundaries, and more - with impact similar to Meltdown/MDS/Foreshadow. This discovery marks a shift from manual discovery (Spectre/Meltdown era) to automated detection of microarchitectural flaws.

[2/2]

🚨After a year-long embargo, our S&P paper is finally out!

📄Paper: aka.ms/enter-exit-l...
🔒AMD Advisory: aka.ms/AAwztqx

📝Summary: We develop the first tool to test security boundaries for uarch leaks -with no prior knowledge of CPU internals. It discovered Transient Scheduler Attack (TSA)... [1/2]

Prompt Injection is a top risk for use of LLMs, where untrusted data can cause a system to misbehave or leak data. We're hard at work on deterministic solutions to prevent or bound the risk, and just published a paper on our innovative information flow control approach: arxiv.org/pdf/2505.23643

a man dancing in front of a banner that says reetlight festo entertainment system ALT: a man dancing in front of a banner that says reetlight festo entertainment system

When the smoke coming out of the Vatican is black and white checkerboard:

so which conclave are they running, SGX or TrustZone?

A powerful picture by the Economist. Somebody needs to have a serious talk with those white grandpas in the US.

Source: www.economist.com/interactive/...

Russian negotiations 101: Always break your promises, but in a way that you can still claim you haven't *technically* broken your promises.

(screenshot from today's Economist briefings)

taking my page tables for a walk

I'm so proud of Zelensky right now. Someone standing up to the bully is a breath of fresh air after months of ignorant BS. And what comes next is scary. Genuinely scary

The full text of the “Minerals Deal”, agreed by Ukraine and the United States European Pravda publishes the final text of the “Minerals Deal,” an intergovernmental arrangement that Ukraine and the United States are set to sign this week...

Ukrainian journalists published the final draft of the UA-US mineral agreement. It's looking considerably less infuriating now, although still no commitment to security guarantees www.eurointegration.com.ua/eng/articles...

One thing I really miss about tech Twitter in the heyday of 2010-2020 is people sharing links to interesting blogposts (usually from people just writing down what they learned or what tech they were exploring).

Those blog posts must still be somewhere there, but increasingly hard to find.

Honestly, that's the best case scenario. Unless you have a morning meeting :)

Recently found out that the Spotify Discover Weekly playlist can be connected to the Android clock and used as a morning alarm.
Literally life-changing

now that DeepSeek has completed AI, we hope that Silicon Valley will turn its attention to the next best thing: investing in rural history museums

Learn about the risks of hallucination, jailbreaks and prompt injection and current mitigations in our ACM Queue paper:

Really cool and deep reverse engineering of speculative leaks in microcode

If Trump is removing all environmental regulation, how about we undo the "memory safe languages" mandate? I mean, how is mandating "memory safe languages" compatible with freedom of speech anyhow?

Enough policing of speech! Raw pointers for raw milk, our youth needs to be hardened by strcpy.

Aaaaany minute now. Any minute

That sounds similar to what UseSec is doing this year

Complete peace in Europe coming up in less than 20 hours from now. True story, guaranteed result

That's the beauty of automated moderation. Works correct 100%, all the time ;)