
Explore the complex relationship between metadata and content in digital communications, examining legal implications and technical intricacies of internet architecture and data collection.

Riverbed: A framework for privacy-respecting web services, allowing users to define data processing constraints. Uses remote attestation and IFC to enforce policies without requiring code modifications.

Exploring SRE and DevOps implementation strategies for startups, comparing centralized and distributed team approaches, and discussing challenges and lessons learned.

Explores novel exploitation techniques against Intel SGX, demonstrating vulnerabilities in enclave code without requiring kernel privileges or crashes, even with existing randomization approaches.

Unveils Facebook's exploitation of sensitive user data for advertising, quantifying its prevalence and discussing privacy implications under GDPR. Proposes a browser extension for user awareness.

Uncovers vulnerabilities in OpenPGP and S/MIME email encryption standards, demonstrating how malleability gadgets can be exploited to reveal encrypted content through exfiltration channels in various email clients.

Optimizing OS fuzzer seed selection through trace distillation, improving code coverage and vulnerability detection in Linux kernel testing.

Explore automated exploit generation for kernel Use-After-Free vulnerabilities using FUZE framework, enhancing security analysis efficiency and exploitability evaluation for complex OS kernels.

Explores QSYM, a fast concolic execution engine for hybrid fuzzing, integrating symbolic emulation with native execution to find bugs in complex software more efficiently than traditional methods.

Explores indirect cache attacks bypassing software-based defenses by exploiting MMU operations, challenging existing security measures and revealing vulnerabilities in cache isolation techniques.

NetHide: A framework for network topology obfuscation that mitigates link-flooding attacks while preserving debugging capabilities. Leverages programmable network devices to modify path tracing probes at line-rate, balancing security and usability.

Humorous critique of tech industry's approach to security, highlighting flaws in machine learning, AI, and IoT while advocating for ethical computing and thoughtful development.

Explore Lamphone, a novel optical side-channel attack that recovers sound from desk lamp vibrations, enabling passive eavesdropping from a distance with high-quality results.

Novel model inversion attacks on classification models reveal vulnerabilities in ML technologies, potentially leaking sensitive training data. Explores confidence score-based and label-only attacks, demonstrating disparate vulnerability across different…

Explore innovative audio deepfake detection using vocal tract reconstruction. Learn how fluid dynamics and articulatory phonetics can identify impossible anatomical arrangements in synthesized speech.

Explores metastable failures in distributed systems, analyzing real-world incidents to categorize triggers and amplification mechanisms, aiding understanding and potential solutions for this prevalent issue.

Explore ECOS, an enterprise-centric offloading system for mobile applications, addressing privacy concerns and resource management to improve handheld device performance and energy efficiency.

Explore privacy-preserving video analytics with Privid, a system enforcing duration-based privacy for public surveillance footage while maintaining utility for various applications.

Automated tool for finding RFC compliance bugs in DNS nameservers. Generates test cases to uncover implementation differences and vulnerabilities, improving DNS software reliability and security.

Explore secure key rotation for cloud storage encryption, addressing current vulnerabilities and introducing new schemes with improved security and performance trade-offs.

Explore iPhone component removal to enhance privacy, balancing functionality loss. Learn about device resilience, sensor impacts, and practical steps for those seeking stronger data collection protection.