Well the secure kernel controls the hypervisor. But I think that diagram is simplified.

That seems like a type II hypervisor (I always get I and II mixed up, I think II is correct).

But since the secure kernel controls it, you might as well say they're the same.

Intel has some really good diagrams describing SLAT (well, EPT for them) and IOMMU stuff.

Yeah so type II.

Well the hypervisor itself may run under, but VTL1 I think controls it in that there is no privilege boundary between them (highly permissive API).

But it's fundamentally necessary for the hypervisor to run both.

The thing I'm most interested in is what exactly it tries to protect, and what its threat model is (which would help me understand whether or not it's actually effective).

If you can include a bypass that, due to fundamental design (i.e. not just a "bug"), can't be mitigated without reworking the KDP design, I'll bounty the answer. :P

Well, doesn't have to be a 0day. Even just linking to someone else's writeup.

Well, you could falsify the claim that it's meant to protect from arbitrary code exec that's already in progress by loading a (signed, intentionally malicious) driver and see if you can disable KDP or otherwise pwn the kernel despite being unable to modify certain data structures.

@Jis12yearsold. I assume your blog links to your real identity?

So what's your threat model? Employers finding your views on SE?

Because it's a lot easier for OSINT to go SE chat -> blog than the other way around.

oh lol

I assume your employer doesn't want someone who supports Palestine? :P

Fair enough.

That's why I'm so glad I'm not stuck with an employer.

Good OPSEC is like process isolation. It'll allow you to safely handle multiple personas and identities safely, without one impacting any of the others.

The best thing to do is have a heavy "internal whitelist" of actions you can take. So basically, use Tails, pwn some cheap server somewhere and use it to stage your attacks from. Don't discuss what you're doing with anyone. All research relevant to that campaign is to be done within Tails, etc.

heh

g'night

Drafts in posts?

Click the "edited on" blue link at the bottom-middle of the post.

Oh wait, drafts?

Like, not submitted?

I don't think drafts are saved unless you start writing an answer and then leave.

Then the draft will be available as pre-typed out on the answer box.

As for getting a list of all drafts that are active... I don't know.

I think it saves, but what I do is post the answer then delete it.

That way you can see it, edit it, and undelete it whenever you want.

np