Holy shit, this exploit is incredible: abusing a series of obscure CPU features to ROP all the way into ring -2: https://github.com/xoreaxeaxeax/sinkhole …
-
@FioraAeterna@daviangel The thing is, it does not work from a VM, and needs root from an OS. There are many other root->FW/SMM exploits.
@FioraAeterna @daviangel So although it's an awesome exploit, personally, as far as I'm concerned, on x86 root means all F/W bets are off.
