| Website | https://github.com/tandasat |
| X | https://twitter.com/standa_t |
| Discord | tandasat |
| Bluesky | https://bsky.app/profile/satoshi-tanda.bsky.social |
Just wrapped up teaching my hypervisor development class. Always refreshing to work with sharp folks from diverse backgrounds—and rewarding to help them get started.
The next class will be in person at @hexacon_fr Check out the conference page if you're interested.
The registration is open now. See you in Paris!
Attached: 1 image I am thrilled to be back and offer the in-person training once again at Hexacon, the fabulous conf. in Paris https://hexacon.fr/trainer/tanda/ Get hands-on experience with virtualization and learn real-world applications and bugs of them! The tickets will be available for purchase soon.
I am thrilled to be back and offer the in-person training once again at Hexacon, the fabulous conf. in Paris
https://hexacon.fr/trainer/tanda/
Get hands-on experience with virtualization and learn real-world applications and bugs of them!
The tickets will be available for purchase soon.
My talk about the recent SMM architecture and security at @thesascon https://youtube.com/watch?v=AIGj6QvqACQ
The conference was well organized and had plenty of networking opportunities. Though, the best thing was the venue :) It is at a beautiful resort again this year, so you will love it.
Yeah, the mechanism to make kernel text read-only on Windows is strongly tied with the Windows architecture, and Hyper-V does not simply expose hypercalls that the VMs can arbitrarily call to achieve the same.
HEIK is the effort to bring the comparable mechanism to the Linux kernel.
This is like "VT-x 101". The essence of HW-assisted VT, everything needed to virtualize Windows on-the-fly, and a bit of security in 2 days.
It misses a ton of fun discussions and exercises that are in my 4 days class, but I am giving back to the community that helped me learn.
https://infosec.exchange/@OpenSecurityTraining2/114359032824440463
We wanted to point out specifically the update to the System Security Learning Path that the excellent low level engineer & researcher Satoshi Tanda @[email protected] has agreed to create our long-desired 'Architecture 3001: Intel Virtual Machine Extensions (VMX)' class! The class is still a ways off, but this will fill an important hole in our curriculum, which is increasingly relevant as Microsoft pushes further into virtualization-based security. https://infosec.exchange/@OpenSecurityTraining2/114301939737793181
I am thrilled to be back and offer the in-person training once again at Hexacon, the fabulous conf. in Paris
https://hexacon.fr/trainer/tanda/
Get hands-on experience with virtualization and learn real-world applications and bugs of them!
The tickets will be available for purchase soon.
The new blog post on supervisor shadow stack restrictions / supervisor shadow-stack control
and check out BigInt and Template literals if you write Windbg extensions. They make JavaScript programming a little more bearable.
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/BigInt
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Template_literals
Added AMD support to hvext, the windbg extension for reversing Hyper-V!
https://github.com/tandasat/hvext
You can check what SVM features are enabled, which MSRs and IO ports are accessible, and how nested page table looks like, for NT, SK and regular VMs.
