5 papers
A Relay a Day Keeps the AirTag Away: Practical Relay Attacks on Apple's AirTags
Gabriel K. Gegenhuber, Leonid Liadveikin, Florian Holzbauer +1
Apple AirTags use Apple's Find My network: when nearby iDevices detect a lost tag, they anonymously forward an encrypted location report to Apple, which the tag's owner can then fe…
Context Matters: Repository-Aware Security Analysis of the Agent Skill Ecosystem
Florian Holzbauer, David Schmidt, Gabriel Gegenhuber +2
Agent skills extend local AI agents, such as Claude Code and OpenClaw, with additional functionality. Their growing popularity has led to dedicated marketplaces resembling mobile a…
Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers
Gabriel K. Gegenhuber, Maximilian Günther, Markus Maier +4
With over 3 billion users globally, mobile instant messaging apps have become indispensable for both personal and professional communication. Besides plain messaging, many services…
Diffie-Hellman Picture Show: Key Exchange Stories from Commercial VoWiFi Deployments
Gabriel Karl Gegenhuber, Florian Holzbauer, Philipp Frenzel +2
Voice over Wi-Fi (VoWiFi) uses a series of IPsec tunnels to deliver IP-based telephony from the subscriber's phone (User Equipment, UE) into the Mobile Network Operator's (MNO) cor…
An Extended View on Measuring Tor AS-level Adversaries
Gabriel Karl Gegenhuber, Markus Maier, Florian Holzbauer +4
Tor provides anonymity to millions of users around the globe which has made it a valuable target for malicious actors. As a low-latency anonymity system, it is vulnerable to traffi…