Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

DDRop: Active Memory Interposer Attacks on Confidential VMs by Dropping DDR5 Writes- 2199

COSIC, and Eth ZurichPosted 29 Days Ago
  • Trusted Execution Environments are built to run in unsafe environments. This paper discusses ways to break this guarantee using an interlay board between the DDR5 RAM, and the computer. By doing this, they were able to access some encrypted data and create malicious page table entries. This could then be used to forge attestation reports, and turn on debug mode for the TEE program.
  • One cool trick that the intreposer does is dropping writes. This means that later, if the stale address is used, it will use a stale value. The article is dense and relies on a strange threat model. Regardless, it's super cool research!