previously I got tweets but now I got skeets, woots, notes, and flushes!

A #donald required three, (three!) #flushes to disappear this morning. I've not been eating #polystyrene. #whatsWrongWithMe ?

Sicher habt auch ihr den ein oder anderen #Patienten, der nach einem Gläschen ein rotes Gesicht bekommt. Was es mit diesen #Flushes auf sich hat und ob Gefahr fürs #Herz besteht, untersucht jetzt eine Studie.
http://docc.hk/nmvmuw

[Paper of the day][#12] We all know that #malware can be #packed. But do you know how a #packer run in your system? I mean, do you know what happens in the CPU when a packed malware runs? In this paper, we explain the architectural events associated to #Self-Modifying Code (#SMC) execution. We show how cache is invalidated, the role of cache coherence protocol, the invalidation of the #trace #cache at the #CPU #decoder level, and the #pipeline stalls caused by instruction rewriting. We show how cache instrumentation and #Hardware #Performance Counters (#HPC) can be used to detect these events, working as detection trigger. We also show how to write SMC code using #cache #flushes to bypass eventual protection. Lots of good material on CPU internals.

Academic paper: https://link.springer.com/article/10.1007/s11416-020-00348-w
Archived version: https://secret.inf.ufpr.br/papers/SMC_marcus.pdf
SMC samples and CTF challenge: https://github.com/marcusbotacin/Self-Modifying-Code