Hannes Weissteiner
Hannes is a PhD Candidate at Graz University of Technology in the CoreSec Group.
His research area is side-channel attacks and defenses.
He has worked on trusted execution environments, DNS and browser security.
In his free time, he sometimes still plays CTFs, including the DEF CON 2025 finals with KuK Hofhackerei.
Session
09-18
14:00
30min
FROST: SSD Side Channels from the Browser, and Why You Should Care
Hannes Weissteiner
The FROST attack fingerprints the websites and apps you use from plain JavaScript in a tab - by measuring SSD contention from the browser. We cover how it works, how realistic the attack is, and who actually needs to care.
Additionally, we show a few other remote side channels to show what is possible in theory for motivated attackers.
Pupin