DEF CON 26 - Christopher Domas - GOD MODE UNLOCKED Hardware Backdoors in redacted x86
DEFCONConference · 46:04 · Watch on YouTube
Unprivileged Ring 3 code can become root on VIA C3 CPUs by setting MSR 0x1107 bit 0 (the "God Mode bit"), executing the hidden 0F 3F launch instruction, then using BOUND instructions to feed commands to a hidden embed...