Andrea Di Dio (@hammertux) header
Andrea Di Dio (@hammertux) profile picture

PhD Candidate in Computer Systems and Security @vu5ec / @VUamsterdam

Amsterdam, The Netherlands
Joined December 2017
Photo by Andrea Di Dio (@hammertux)Photo by Andrea Di Dio (@hammertux)Photo by Andrea Di Dio (@hammertux)Photo by Andrea Di Dio (@hammertux)Photo by Andrea Di Dio (@hammertux)
Replying to @hammertux
If you're interested in #Rowhammer and #FlipFengShui and want to read about building an exploit, you can read about it at hammertux.github.io/rowhamme…. Feedback/Suggestions are very welcome :) 2/2
3
18
3
54
Andrea Di Dio retweeted
We are a unicorn! 🦄 Exein raised $270M at a $1.7B valuation to build the security layer for Physical AI. The new funding allows us to expand globally our protection for intelligent machines that use AI to perceive, make decisions, and act in the physical world. The round is led by @HeadlineVC, with participation from Sofina, @GoldmanSachs, the @EIB Group through ETCI, @KfW_int, and T-Capital by @deutschetelekom, and continued backing from @balderton, @HV_Capital, Intrepid Growth Partners, 33N, @lakestarvc, Supernova Invest, Blue Cloud Ventures, and Geodesic Capital. This comes alongside an upsized revolving credit facility led by @jpmorgan, with KfW joining. We want to thank our investors for their continued support and belief in our vision. We're also grateful to our partners and customers, whose trust and collaboration help us rise to the challenges of an always-evolving industry. Lastly, we want to dedicate a few words to our global team across Europe, Asia and the Americas. Whether you're celebrating this milestone at HQ, in one of our offices, or on a plane between time zones, thank you. Your constant commitment and drive for excellence are what allow Exein to build the global standard for security in the connected world.
5
10
6
125
406,751
Andrea Di Dio retweeted
We are still looking for (self) nominations for @USENIXSecurity '26 Artifact Evaluation Committee! Please help us spread the word 🚀 You can *Promote and Support Open Science* by filling out the nomination form by Friday, October 17: forms.gle/sMCJHww2qcUKtKqBA
2
3
275
Andrea Di Dio retweeted
No award in 2025? Here is another chance: @chwress, Deepak Kumar, and I are looking for (self) nominations for @USENIXSecurity '26 Artifact Evaluation Committee! Remember to fill the nomination form by Friday, October 17: forms.gle/sMCJHww2qcUKtKqBA And, help us spread the word!🚀
Congratulations to @USENIXSecurity 2025 AE: 🏆Distinguished Artifact Awards 🏆Distinguished Reviewer Awards ⭐Noteworthy Reviewer Recognition 🥷Ninja Reviewer Recognition secartifacts.github.io/useni… And thank you all for your help! secartifacts.github.io/useni… CC @pvadrevu TiagoHeinrich
4
3
458
[1/3] Turns out those old MDS gadgets have new life... In our latest paper at @IEEESSP , we show how attackers can construct PRELOAD+TIME, a new cache side-channel which takes advantage of these 'half-Spectre' gadgets.
1
5
7
1,068
[2/3] We showcase the potential of PRELOAD+TIME by mounting the first crash-free #Rowhammer attack to corrupt PTEs and gain R/W access to the entire physical memory without relying on templating or memory massaging.
1
169
Slides and recording from my "SLUB Internals for Exploit Developers" talk at @LinuxSecSummit yesterday 🥳 Slides: docs.google.com/presentation… Slides PDF: static.sched.com/hosted_file… Recording: youtu.be/WWQh4yAoXME?t=23158
Gonna be giving a talk "SLUB Internals for Exploit Developers" at @LinuxSecSummit next week. Plan to cover the basics one needs to know before writing exploits for slab bugs; slides coming along 😁 Also gonna stay around for @linuxplumbers. lsseu2024.sched.com/event/1e…
2
78
3
251
32,564
Andrea Di Dio retweeted
Just a few days left to apply to our PhD and PostDoc positions available at @vu5ec. If you love low-level systems hacking and would you like to work at a top systems security research group in Amsterdam, consider applying: workingat.vu.nl/vacancies/ph…
2
11
31
2,333
Andrea Di Dio retweeted
This took a significant amount of time and money, and now we know what DRAM vendors are doing in their sense amplifiers! Lots of research opportunities moving forward. All the images and the reverse engineered circuits are now publicly available.
For the first time, we imaged and reverse engineered 6 modern DDR4/5 DRAM chips (comsec.ethz.ch/hifi-dram) Due to the incredibly small feature size of modern ICs, we use SEM combined with FIB reaching pixel resolutions as low as 3.4nm. Then we evaluate 10 years of DRAM research.
1
8
49
5,360
Andrea Di Dio retweeted
If you ever happen to look for Spectre gadgets manually and feel pain and loneliness, you should check github.com/vusec/inspectre-g… ... It's been a wild ride, but working with @SanWieb was the best thing ever :) Also, BHI is back baby
Branch History Injection (BHI) is back! Disclosing Native BHI, bypassing deployed Spectre-v2/BHI mitigations (e.g., eBPF=off) to leak arbitrary kernel/host memory (e.g., root password hash below). Joint work by @SanWieb @HBitmasks @herbertbos @c_giuffrida: vusec.net/projects/native-bh…
5
13
1,990
Andrea Di Dio retweeted
Oh, it seems the video of my NDSS keynote is now online: youtube.com/watch?v=vhj2We2v… "Corrupted Memories of Memory Corruption: Offensive Security, Academia, and the Rest of the World"
1
45
2
124
11,640
Should we lose hope already on Rowhammer attacks? Andrea Di Dio from Vrije Universiteit Amsterdam is showing us at #NDSS23 that it is feasible to devise a software-based design to mitigate ECC-aware Rowhammer attacks.
1
4
1
13
2,485
Happy to share that my latest paper, Copy-on-Flip, has been accepted @NDSSSymposium. If you're interested in #Rowhammer defenses you can check it out here:download.vusec.net/papers/co…. Big thanks to the other authors who helped out on the paper: Koen Koning, @herbertbos @c_giuffrida.
1
8
31
3,393
Andrea Di Dio retweeted
🏆 SIAMO NOI, SIAMO NOI, I CAMPIONI DELL'ITALIA SIAMO NOI! 🇮🇹 🏆 #SassuoloMilan #SempreMilan #AlwaysWithYou
2,470
39,910
8,364
124,669
Buzzing to announce that I have completed my MSc and have started my PhD at @vu5ec last week. I am very grateful for the opportunity given and thrilled to continue to do research on topics I am passionate about.
1
32
Please vaccinate. I have no desire to learn the entire Greek alphabet.
493
20,512
1,230
73,370
IT'S COMING ROME 🇮🇹♥️ #ForzaAzzuri
1
3
📢 THE TIME HAS COME📢 Today I make public ALL *recordings* and updated slides (+ FAQ) for my mobile security class, MOBISEC 2020! Everything is available, for free, at: mobisec.reyammer.io/slides! Few words about this release in a short thread 👇
23
400
25
1,012
Andrea Di Dio retweeted
OK I didn't appreciate how jam-packed this thing is from @iFixit teardown photos. Also it's 0.3mm PCB so I'm pretty sure I broke some solder joints getting it out. Test pads are accessible w/o removing PCB so if this one isn't working will test another one.
13
115
33
460