Running the “Reflections on Trusting Trust” Compiler
https://research.swtch.com/nih Supply chain security is a hot topic today, but it is a very old problem. In October 1983, 40 years ago this week, Ken Thompson chose supply chain security…
Year: 2025
Microarchitecture Vulnerabilities: Past, Present, and Future
https://www.youtube.com/watch?v=LIYZemVCgiM Past Present Logic Issues Exploitation Techniques Physical Domain in Software Mitigation Efforts Physical hardware cannot be changed in the field Vendors build in "Survivability features" Microcode is the most…
SysBumps: Exploiting Speculative Execution in System Calls
https://www.youtube.com/watch?v=-WO_1EKkdJk The video presents an attack technique called SysBumps, demonstrated by researchers Hyerean Jang, Taehun Kim, and Youngjoo Shin at Black Hat Europe 2024. Here’s what it’s about: What SysBumps…
Bypassing ARM’s Memory Tagging Extension with a Side-Channel Attack
https://www.youtube.com/watch?v=DoPb4mG-7TY This explains a research project on how to bypass ARM's Memory Tagging Extension (MTE), a hardware feature designed to prevent memory corruption vulnerabilities. Here are the key takeaways: ARM…
Uncovering Supply Chain Attack with Code Genome Framework
https://www.youtube.com/watch?v=CTbP6L3IuW4 This talk from IBM Research focuses on using AI and machine learning to combat supply chain attacks. The presenters highlight the increasing lack of trust in software due to…
The Devil is in the (Micro-) Architectures: Uncovering New Side-Channel and Bit-Flip Attack Surfaces
https://www.youtube.com/watch?v=ywm5krs1GEs Jolio and Yenzo discusses new attack vectors on Deep Neural Network (DNN) executables, specifically focusing on side-channel and bit-flip vulnerabilities. Here's a summary of the key points: DNN Executables…
Arbitrary Data Manipulation and Leakage with CPU Zero-Day Bugs on RISC-V
https://www.youtube.com/watch?v=1AAZUd_Yk7U Fabian Thomas and Laurent Schmierer, introduces "GhostRider," a zero-day vulnerability they discovered in the T-Head C910 RISC-V processor. This vulnerability allows for data manipulation and leakage by bypassing software…
Ubuntu XRDP
https://cloud.tencent.com/developer/article/2355160 XRDP is a cross-platform remote desktop connection tool that can be used on Windows and Linux . Using XRDP on Ubuntu allows you to remotely connect to a Linux…
An introduction to GCC and GCC’s plugins
https://gabrieleserra.ml/blog/2020-08-27-an-introduction-to-gcc-and-gccs-plugins.html 1. Brief introduction to GNU’s GCC The GNU toolchain is a collection of tools and libraries produced in the context of the GNU project. In 1983, Richard Stallman announced the…
How to run a program with commandline arguments using GDB within a Bash script?
https://stackoverflow.com/questions/6121094/how-do-i-run-a-program-with-commandline-arguments-using-gdb-within-a-bash-script Run gdb with --args parameter: gdb --args executablename arg1 arg2 arg3 If you are doing this often (e.g. when running GDB from a script), you might want to consider the following…