Daniel Moghimi

@flowyroll

Senior Scientist @Google. Computer and Hardware Security. Tweets are mine and not my employer's. #downfall Previously: @UCSD @Qualcomm @WPI @TalosSecurity

San Diego, CA

moghimi.org

Replies Reposts Media

Pinned
Daniel Moghimi
@flowyroll
Aug 8, 2023
Dropping #Downfall, exploiting speculative forwarding of 'Gather' instruction to steal data from hardware registers. #MeltdownSequel - Practical to exploit (POC/Demo) - Defeat all isolation boundaries (OS, VM, SGX) - Bypass all Meltdown/MDS mitigations. downfall.page
GIF
16
Daniel Moghimi
@flowyroll
Feb 17
Proud to be part of this impactful effort.
Google VRP (Google Bug Hunters)
@GoogleVRP
Feb 10
Curious how we go about security reviews at Google? In this case, we teamed up with Intel to take a closer look at Intel Trust Domain Extensions (TDX) 1.5 and help secure the confidential computing space! For the details, 👇 bughunters.google.com/blog/a-joint-s…
1
Daniel Moghimi
@flowyroll
Sep 13, 2025
FFmpeg folks are talking about performance degradation due to Downfall (downfall.page) vulnerability, and if they can disable it. Short blog post on the issue: moghimi.org/downfall_perfo…
FFmpeg
@FFmpeg
Sep 9, 2025
Interesting patch from @Google showing the effects of Intel security mitigations on the gather assembly language instruction. A huge performance decrease as a result.
1
Daniel Moghimi
@flowyroll
Sep 9, 2025
Deploying mitigations at scale is hard. It has been a couple of years since I discovered downfall.page / GDS attack. The performance degradation due to mitigation is bad, which may cause folks to disable them :(
FFmpeg
@FFmpeg
Sep 9, 2025
Interesting patch from @Google showing the effects of Intel security mitigations on the gather assembly language instruction. A huge performance decrease as a result.
Daniel Moghimi
@flowyroll
Nov 16, 2024
Follow me on flowyroll.bsky.social