Dan Luu

@4Dgifts @ortegaalfredo @cynicalsecurity @TheKanter @danluu @byterazor Would a tiny bit of non-volatile memory be easily seen on a die shot?

@solardiz @4Dgifts @ortegaalfredo @cynicalsecurity @TheKanter @byterazor Very hard to sneak in, since it's a different manuf. process.

@solardiz @4Dgifts @ortegaalfredo @cynicalsecurity @TheKanter @byterazor However, it's common to build mini-logic analyzers in for si debug

@danluu @solardiz @4Dgifts @ortegaalfredo @cynicalsecurity @byterazor intel has a full-blown logic analyzer for the on-chip fabric

@TheKanter @danluu @4Dgifts @ortegaalfredo @cynicalsecurity @byterazor Any way we can access such in-CPU logic analyzers from our software?

@solardiz @TheKanter @4Dgifts @ortegaalfredo @cynicalsecurity @byterazor In all cases that I know of, you'd have to reverse engineer access

@solardiz @TheKanter @4Dgifts @ortegaalfredo @cynicalsecurity @byterazor Not sure how, since unlike K8 case, you won't have ptrs in binaries

@solardiz @TheKanter @4Dgifts @ortegaalfredo @cynicalsecurity @byterazor unless you dig through trash HDs from post-si debug lab or somethin