I write about my blue team experiences and my hobby researching hardware security.
A few weeks ago an ordinary security assessment turned into an incident response whirlwind. It was definitely a first for me, and I was kindly granted permission to outline the events in this blog post. This investigation started scary but turned out be quite fun, and I hope reading it will be informative to you too. I'll be back to posting about my hardware research soon. How it started What hell…
Today we'll continue our voyage into the graphics subsystem components. The question we'll try to answer is what kind of communications occur between the GuC and the rest of the system. In this post we'll look at firmware components and next post at Windows components. For a reminder what the GuC is, look at part1 post . Part 1: The IntelGOP DXE driver Part 2: From CSME Conclusion Part 1: The…
General Architecture Core Graphics 2D Graphics Pipeline 3D Graphics Pipeline The Execution Units (EUs) The GuC Boot ROM and GuC firmware The μOS kernel Communication with the OS Host Graphics Architecture UEFI Windows Basic Memory Management SVM Mode Cache Coherence Boot process OCA Conclusion I promised I’ll post stuff about low level hardware issues, and here is my second post on the subject,…
In 2018 I was contracted to help a large organization with a very distributed and remote structure. One of the things that I found was that the organization does not have a strict policy regarding the creation, storage and lifecycle of SSH keys. I decided to look into this issue in general, so in Feb 2019 wrote a crawler that looked for SSH keys around the web - public repos, s3 bucket with bad…
A few years ago I was asked to help on a red-team exercise in a company doing hardware R&D.
Introduction and System Architecture Buses More Components The Flash Chip Overview Early power on Bring-Up (BUP) CPU initialization UEFI initialization Loading the boot loader Windows Boot Winload HVCI Dynamic Root of Trust Model (DRTM) UEFI Memory Attributes Table Other OSs More Protections IOMMU and DMA protections Secure Devices SMM Memory Reset protections This blog post is an in-depth dive…
Is this a good time to start a new cyber security blog?