Zurich, Switzerland
- Tweets 239
- Following 599
- Followers 639
- Likes 8,504
Leaving this platform for good because 1. it’s not functional
2. EM is a scam
Find me on bluesky or mastodon (link in bio)
2
183
Alexandra Sandulescu retweeted
📢 📢 📢 Calling all vulnerability researchers interested in microcode!
Check out our blog post covering EntrySign, the AMD Zen microcode signature validation vulnerability recently discovered by the Google Security team.
bughunters.google.com/blog/5…
40
176
14,917
Alexandra Sandulescu retweeted
As promised, more details!
TL;DR: AMD used CMAC with an example key from the standard as a hash function for the microcode update signatures. This let us create signatures that look valid to the CPU.
Here are the details about the AMD Signature verification vulnerability we worked on, Enjoy!
bughunters.google.com/blog/5…
1
6
51
4,604
Alexandra Sandulescu retweeted
Not sure why Google's kCTF isn't more widely known (other than by all the researchers making money from it). 44 unique successful exploits in a year against Linux kernels even running Google's out-of-tree "hardening" is a big story I'd say...
2
25
151
14,575
!!!!!
github.com/google/security-r…
Our newest research project is finally public! We can load malicious microcode on Zen1-Zen4 CPUs!
8
337
Alexandra Sandulescu retweeted
Slides for @wipawel's H2HC presentation this month on the TLB are now available on grsecurity.net/papers
If you've never heard of "paging-structure caches" before, check it out!
12
32
13,150
Alexandra Sandulescu retweeted
Back in @h2hconference last week, @pwningsystems and me presented this tool we've been working on (with Artem) we now call "🐧 Kernel Explorer".
It's still early on, I'll work on FF and a11y next!
storage.googleapis.com/kerne…
storage.googleapis.com/kerne…
Code is
github.com/google/security-r…
1
23
83
13,051
Alexandra Sandulescu retweeted
Celebrating 15 years of password hacking 💻 🔑, Swiss Army knives (and sometimes even chainsaws or swords) included! 😲
Discover how Google's security teams turn employee farewells into security tests.
bughunters.google.com/blog/6…
1
31
107
27,173
Alexandra Sandulescu retweeted
Our analysis of Intel CAT feature as a cache side-channel mitigation. Tl;dr don’t. @bsdaemon langsechq.gitlab.io/spw24/pa…
1
14
49
10,814
Alexandra Sandulescu retweeted
In less significant news, we have an open PhD position in COMSEC at ETH. We like low-level hw/sw with a security twist (think CPU/DRAM/RTL/browser/kernel). If you enjoy collaboration and want to see how deep the rabbit hole goes, send us your application! jobs.ethz.ch/job/view/JOPG_e…
14
40
5,347
Alexandra Sandulescu retweeted
If you liked exploiting use-after-frees, you will love exploiting speculative UaFs! Paper: download.vusec.net/papers/gh…
How do synchronization primitives work during speculative execution? THEY DON'T!
Disclosing #GhostRace (paper @USENIXSecurity). We turn all arch. race-free critical regions of OS/Hypervisors into Speculative Race Conditions. Joint work @vu5ec @IBMResearch: vusec.net/projects/ghostrace
15
40
5,773
Alexandra Sandulescu retweeted
I promise that @Tarsnap will never provide your data to third-party AI technology partners.
I mean, I can't give your data to anyone; it's all encrypted, and I don't have the keys.
If you are using @dropbox and do not want 3rd party AI technology partners to have access to your dropbox files, flip this switch (on by default, or did I agree to this somewhere?) (web->account->settings-3rd party AI) /cc @EU_EDPS
1
13
46
4,135
Alexandra Sandulescu retweeted
Want to learn how Google responds to and mitigates critical vulnerabilities?
See our latest blog with the story of Google's response to the Reptar CPU vulnerability!
bughunters.google.com/blog/6…
18
89
10,182
Alexandra Sandulescu retweeted
US vetoes UN security council resolution calling for immediate ceasefire in Gaza
Follow live updates on the BBC website: bbc.in/41uWfqV
503
248
640
755,166