Live data from Hacker News

DEF Con 32 – AMD Sinkclose Universal Ring-2 Privilege Escalation (Not Redacted) [pdf]

media.defcon.org

1–10 of 35 posts

Re: DEF Con 32 – AMD Sinkclose Universal Ring-2 Privilege Escalation (Not Redacted) [pdf]

#2
I was confused by the title, by "Ring-2" it means "Ring -2" (minus two), which is "traditionally" SMM (System Management Mode), a horrible relic that lets your BIOS/UEFI silently steal the CPU from the OS to implement janky drivers or workarounds directly in the firmware (occasionally causing all sorts of mayhem).

(Actual Ring 2 is very rarely seen, so perhaps I should have known!)

Re: DEF Con 32 – AMD Sinkclose Universal Ring-2 Privilege Escalation (Not Redacted) [pdf]

#5

Is the recorded session available anywhere? Generally prefer the slides with the presenter walking us through them.

DEF CON recordings tend to take a while to appear. This one was supposedly recorded,[0] but I can't find it.

[0]: https://info.defcon.org/event/?id=54863

Re: DEF Con 32 – AMD Sinkclose Universal Ring-2 Privilege Escalation (Not Redacted) [pdf]

#8
Sometimes it's nice to see SMP causing headaches for the "bad" guys for a change. They did eventually work around it, but half of this paper is working around problems where the second core gets out of sync and crashes as soon as they tried to exploit the system.

Re: DEF Con 32 – AMD Sinkclose Universal Ring-2 Privilege Escalation (Not Redacted) [pdf]

#9
post #2

I was confused by the title, by "Ring-2" it means "Ring -2" (minus two), which is "traditionally" SMM (System Management Mode), a horrible relic that lets your BIOS/UEFI silently steal the CPU from the OS to implement janky drivers or workarounds directly in the firmware (occasionally causing all sorts of mayhem). (Actual Ring 2 is very rarely seen, so perhaps I should have known!)

Wait, there are negative rings!? I'd like to learn more about this but it's not a very easy to search term. Any pointers?
Post reply on HN