3 ms·

Intel Visa: Through the Rabbit Hole [pdf]

• rburhum 8y ago
  Out of curiosity, is the encryption salt really that quote from William Wordsworth's poem ("I wondered lonely as a cloud...") or was that a joke? Can't extract sarcasm from presentation slides :(
• 0x0 8y ago
  The fuse thing about "deterministic random number generation" is spooky... does it mean it's possible to compromise RDRAND? At least it looks like linux has a "random.trust_cpu=0" option... https://security.stackexchange.com/questions/42164/rdrand-from-dev-random https://security.stackexchange.com/questions/42164/rdrand-fr...
  • lima 8y ago
    Linux XORs its PRNG with the hardware RNG, so it being deterministic wouldn't break it.
• snazz 8y ago
  Despite the fact that it isn’t much of a vulnerability, per se, I’d be very interested to see if more processor vulnerabilities come out as a result of these better debugging tools.
  • agnokapathetic 8y ago
    “Imagine if instead of treating a conference as a passive chance to see a broad range of hacking demos, we all treated it as a chance to study up on the latest techniques. Something between workshop and lecture series...” - Dave Aitel https://twitter.com/daveaitel/status/1111979964780503045 https://twitter.com/daveaitel/status/1111979964780503045
• deleted 8y ago
  [deleted]