u/QSCFEin r/ReverseEngineering • Recommends
GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs
0:00 / 0:00
#x86#hardwarebackdoor#blackhat
GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs
Black Hat
281K subscribers • 47 videos on Hallway • Conference channel
- Recommended by 5 people: 1 on Hacker News, 1 on Lobsters, 2 in engineering communities and 1 curated list.
- A classic. People kept recommending it from 2018 to 2022.
- Presented by Christopher Domas, security researcher
Advanced. Deep dive for people who know the field.
319K views8 years ago5 recommendations
SecurityHardwareReverse engineeringCPUs and computer architectureExploits and vulnerabilities
Christopher Domas demonstrates a hardware backdoor in a third-party x86 processor that allows userland code to gain root access.
This talk will demonstrate what everyone has long feared but never proven: there are hardware backdoors in some x86 processors, and they're buried deeper than we ever imagined possible. While this research specifically examines a third-party processor, we use this as a stepping stone to explore the feasibility of more widespread hardware backdoors. By Christopher Domas Full Abstract & Presentation Materials: blackhat.com/us-18/briefings/schedule/#god-mode-unlocked---h…Why it's here
5 people recommend thisWhat people say. Recommended as a mind-blowing demonstration of how hardware implants and undocumented CPU instructions can compromise system security.
jerfon Hacker News • Recommends
On “RAMBleed Attack – Reading Bits in Memory Without Accessing Them”
…too many mind-blowing presentations from security researchers to think I can bound their abilities safely. I wouldn't care to bet that they won't move the attacks I already am flabbergasted can exist to some other even-more practical attack that I am flabbergasted can exist. This is unrelated to the current matter, but let me give you an example: link to this video If you think that's trivially obvious, and you're confident you can predict how these sorts of things will play out in the future, more power to you, but I'm certainly not justified in that belief at my skill level. I'm just happy I can follow that presentation!…
programming-talkscurated list on GitHubRecommends
Under “Security”
GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs 00:50:59 by **Christopher Domas** (2018)
MattSteelbladeon Hacker News • Mentions
On “The Big Hack: Statements From Amazon, Apple, Supermicro, Chinese Government”
Here is a demonstration by Christopher Domas where he uses an undocumented processor hidden in an X86 processor to become root: link to this video
wpdev_63on Hacker News • Mentions
On “Apple CEO Tim Cook Calling for Bloomberg to Retract Its Chinese Spy Chip Story”
…only speculate and they probably can't stop all the hardware backdoors this way. Anybody that would be caught disclosing highly classified information would probably be found and promptly hanged(or get in some sort of freak car accident). They probably have some serious counterintelligence to catch the leaks. Once again I am only speculating. 0: link to this video 1: link…
Enginerrrdon Hacker News • Mentions
On “A new hardware implant shows how easy it may be to hide malicious chips”
Yeah Occam's razor says your efforts would be much better spent on flashing custom firmware than a retrofit. That or a deliberate backdoor built into the chip from the ground up. Or something like this: link to this video But a nearly magic rice-grain part with a microcontroller and networking?? You could make a fortune in IOT with something that capable.
matheusmoreiraon Hacker News • Mentions
On “Are Xiaomi browsers spyware? Yes, they are (2020)”
> we need tools that don't require so much blind trust Completely agree. > Open source and verifiable down to the firmware is the only chance we have at any real level of trust The hardware itself could be compromised though. There's just no way to know what's really inside these black boxes. link to this video We'll never have real trust until we get the ability to fabricate our own processors in our own home just like we already have the ability to write our own software.