Live data from Hacker News

Sandsifter: find undocumented instructions and bugs on x86 CPU

github.com

91–94 of 94 posts

Re: Sandsifter: find undocumented instructions and bugs on x86 CPU

#91
post #85

Earlier quoted context omitted.

Separate research has been done on microcode. The general consensus is that Intel's microcode binaries are encrypted, and are secured with a RSA2048-SHA256 signature. http://inertiawar.com/microcode/

I am surprised private keys have never leaked.

I wouldn't be surprised if those keys are in a HSM, so they can't be leaked. That'd be the safe way of handling it, and it's well within Intel's resources.

Re: Sandsifter: find undocumented instructions and bugs on x86 CPU

#93
post #30

Earlier quoted context omitted.

It would be even better if there was a web service that would collect these logs for different processors so everyone didn't have to invest the time to run the analysis.

Well they do mention in the description: The results of a scan can sometimes be difficult for the tools to automatically classify, and may require manual analysis. For help analyzing your results, feel free to send the ./data/log file to xoreaxeaxeax@gmail.com. No personal information, other than the processor make, model, and revision (from /proc/cpuinfo) are included in this log.

That's great, but doesn't solve the problem of how long it takes to run a scan.

Re: Sandsifter: find undocumented instructions and bugs on x86 CPU

#94
post #80

Earlier quoted context omitted.

So I must have some big misunderstanding then -- in what sense can a different binary input to a boolean circuit throw an illegal exception? How does the concept make sense at that level?

Processors have "traps" or "exceptions" which work kind of like interrupts. They are utterly unlike exceptions in say C++. They transfer control to another location you specify in an interrupt table. The most well known of these is the "page fault" which occurs when you write/read/fetch from memory you're not allowed to. Say you have a userland process which dereferences a NULL pointer in C. In the CPUs page table th…

[deleted]
Post reply on HN