The Discovery of Zenbleed ft. Tavis Ormandy

How did Tavis Ormandy fuzz CPUs to discover Zenbleed? In this video we learn about the techniques to make this work! This video is sponsored by Google: https://security.googleblog.com/2023/08/downfall-and-zenbleed-googlers-helping.html LEARN ON HEXTREE (ad) Learn hacking on Hextree: https://www.hextree.io/ Join the Hextree Discord: https://discord.gg/xgQpCQCpvy Watch part 2: https://www.youtube.com/watch?v=9EY_9KtxyPg Original Zenbleed Writeup: https://lock.cmpxchg8b.com/zenbleed.html AMD Security Bulletin: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7008.html Tavis Ormandy: https://twitter.com/taviso Sudoedit Exploit Series: https://www.youtube.com/playlist?list=PLhixgUqwRTjy0gMuT4C3bmjeZjuNQyqdx Documented Intel Performance Counters: https://perfmon-events.intel.com/skylake_server.html RIDL Video: https://www.youtube.com/watch?v=x_R1DeZxGc0 CHAPTERS 00:00 - Intro 01:22 - Zenbleed Proof of Concept 03:06 - Tavis Ormandy 04:18 - How Fuzzing Works 06:31 - CPU Performance Counters 11:06 - Detect Bugs with "Oracle Serialization" 15:09 - Fuzzing and Discovering Zenbleed 18:46 - Outro SUPPORT Per video: https://www.patreon.com/join/liveoverflow Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join Buy my handwriting font (ad): https://shop.liveoverflow.com/ WATCH, FOLLOW & READ Second channel: https://www.youtube.com/LiveUnderflow Twitch: https://twitch.tv/LiveOverflow/ Twitter: https://twitter.com/LiveOverflow/ Instagram: https://instagram.com/LiveOverflow/ TikTok: https://www.tiktok.com/@liveoverflow_ LiveOverflow blog: https://liveoverflow.com/ Hextree blog (ad): https://www.hextree.io/blog #SecurityResearch #Zenbleed #LiveOverflow (ad) LiveOverflow YouTube channel is supported by advertisement and product placement.