OK, Thunderclap sounds pretty awesome. Bypassing IOMMU protections by emulating a trusted device and pushing the limits of memory regions you get access to. Technical details: https://thunderclap.io/
-
Show this thread
-
Even cooler, they published all their tools. Big and $4500 right now, but looking forward to a cost-reduced version, maybe to update my slotscreamers :)
2 replies 2 retweets 18 likesShow this thread -
From whitepaper - FPGA PCIe TLPs -> Qemu calls to emulate the NIC.pic.twitter.com/0LjZkPTa1T
1 reply 0 retweets 8 likesShow this thread -
The notes mention using the arria fpga because it was the only one that allowed custom PCIe config registers. I think that's cause they wanted to use a hard block and not implement their own PCIe block. I look forward to doing this on an open fpga toolchain soon!
2 replies 0 retweets 8 likesShow this thread -
Really glad to see someone finally showing how bad ATS is, I've been complaining about this for 5 years (but never actually did anything about it)pic.twitter.com/86cK3i9rM5
2 replies 2 retweets 16 likesShow this thread -
Here's the part of the ATS spec that demands that all devices be well behaved and never do anything malicious like what thunderclap does:pic.twitter.com/sx38s6P0sL
3 replies 1 retweet 21 likesShow this thread -
Replying to @securelyfitz
IIRC we tried this on the PS4 and it didn't actually work (presumably ATS was not supported). If Thunderbolt actually allows this then whoever thought was a good idea needs a few hits with a cluebat...
1 reply 0 retweets 1 like -
Replying to @marcan42
When I first examined ATS it was only supported on server parts, i'm not sure when it trickled down to everything.
1 reply 0 retweets 1 like
That was pretty much our conclusion too, at the time.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.