
Breaking the x86 Instruction Set
About this video
Christopher Domas presents at Black Hat 2017 how page fault analysis and processor fuzzing can exhaustively search the x86 instruction set. The talk uncovers undocumented instructions and hardware bugs and shows limits of disassemblers.
Why it appears in the archive
HN recommends it as a clever, entertaining and easy-to-follow talk on finding hidden x86 instructions with the Sandsifter tool.
AI-generated summary and labels from the source dataset; verify important details against the video. Source & credits.
From the Hacker News discussion
> I trust its disassembler (especially for mainstream languages) more than almost any other disassembler Might I suggest Christopher Domas' Black Hat talk "Breaking the x86 ISA", along the way of which he demonstrates the limitations of all disassemblers out there, including IDA's :) Talk: [VIDEO] Slides: [LINK] Paper: [LINK]
Read original comment ↗One of my favourite talks I watched was "Low Cost Non-Invasive Biomedical Imaging - An Open Electrical Impedance Tomography Project" [LINK] As it presented an interesting technique I'd never heard of before, along with an implementation. Also I thought the 'Breaking the x86 Instruction Set' talk was extremely clever - [VIDEO]
Read original comment ↗my favorite were: - How the reputation economy is creating data-driven conformity [LINK] - DEF CON 25 (2017) - Weaponizing Machine Learning [LINK] - BlackHat 2017: Breaking the x86 Instruction Set [VIDEO]
Read original comment ↗Breaking the x86 Instruction Set by Christopher Domas. [VIDEO] I found it easy to follow and pretty entertaining.
Read original comment ↗There was a really good Blackhat talk a year or two ago in a sort of similar vein: they developed an approach to iterate and find undocumented opcodes. [VIDEO] The software they developed is called Sandsifter.
Read original comment ↗"I thought you were saying that the use of microcode would complicate verification of the hardware." I do think that microcode opens up the possibility of subtle injections to follow code/hardware paths you might not easily predict. A really good talk on reverse engineering an ISA implementation: [VIDEO]
Read original comment ↗There was an interesting black hat talk about automatically finding undocumented instructions. [0] Interesting comment on twitter to the instruction of the original post[1] [0] [VIDEO] [1] [LINK]
Read original comment ↗How about undocumented instructions? Sandsifter[1] is an interesting project and the video from BlackHat[2] is a good watch. There's also a previous discussion of it on HN[3]. [1] [LINK] [2] [VIDEO] [3] [LINK]
Read original comment ↗