How The RIDL CPU Vulnerability Was Found
6,420In this video we explore the basic ideas behind CPU vulnerabilities and have a closer look at RIDL.
This video is sponsored by Intel and their Project Circuit Breaker: https://www.projectcircuitbreaker.com/
How to Benchmark Code Execution Times: https://www.intel.com/content/dam/www/public/us/en/documents/white-papers/ia-32-ia-64-benchmark-code-execution-paper.pdf
Anders Fogh: https://cyber.wtf/2017/07/28/negative-result-reading-kernel-memory-from-user-mode/
Speculose: https://arxiv.org/abs/1801.04084
RIDL Paper: https://mdsattacks.com/files/ridl.pdf
Foreshadow PoC: https://github.com/gregvish/l1tf-poc/blob/master/doit.c
Sebastian Österlund: https://osterlund.xyz/
Chapters:
00:00 - Intro & Motivation
00:57 - Concept #1: CPU Caches
01:57 - Measure Cache Access Time with rdtscp
05:00 - Concept #2: Out-of-order Execution
06:11 - CPU Pipelining
07:13 - Out-of-order Execution Example
09:19 - CPU Caching + Out-of-order Execution = Attack Idea!!
10:33 - Negative Result: Reading Kernel Memory From User Mode
13:45 - Pandoras Box
14:23 - Interview with Sebastian Österlund
17:24 - Accidental RIDL Discovery
19:31 - NULL Pointer Bug
21:50 - Investigating Root Cause
23:28 - Conclusion
24:24 - Outro
-=[ ❤️ Support ]=-
→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
-=[ 🐕 Social ]=-
→ Twitter: https://twitter.com/LiveOverflow/
→ Instagram: https://instagram.com/LiveOverflow/
→ Blog: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/
Other Videos By LiveOverflow
| 2022-11-20 | Cat Coordinate Exploit 1.19.2 |
| 2022-11-10 | What is a Server? (Deepdive) |
| 2022-10-31 | Server Griefed and New Beginnings ... |
| 2022-10-21 | I Leaked My IP Address! |
| 2022-10-12 | WorldGuard Bypass |
| 2022-10-03 | The Origin of Cross-Site Scripting (XSS) - Hacker Etymology |
| 2022-09-23 | The Age of Universal XSS |
| 2022-09-13 | The End Of Humans In Minecraft |
| 2022-09-04 | The Three JavaScript Hacking Legends |
| 2022-08-25 | Minecraft Force-OP Exploit! |
| 2022-08-11 | How The RIDL CPU Vulnerability Was Found |
| 2022-08-07 | Code Review vs. Dynamic Testing explained with Minecraft |
| 2022-07-31 | Self-Learning Reverse Engineering in 2022 |
| 2022-07-23 | The Same Origin Policy - Hacker History |
| 2022-07-13 | They Cracked My Server! |
| 2022-07-03 | Is Hacking Illegal? A Deeper Look at Hacking Laws |
| 2022-06-24 | Are Resource Packs Safe? |
| 2022-06-12 | The State of log4shell in Minecraft Months Later |
| 2022-06-03 | Could I Hack into Google Cloud? |
| 2022-05-19 | Scanning The Internet for Minecraft Servers |
| 2022-05-08 | Crafting a Minecraft 0day... |