Downfall: New Intel CPU Attack

Every summer, hackers from around the US and around the globe descend on Las Vegas, Nevada, for a series of computer security conferences which are lovingly referred to as hacker summer camp. These conferences – BSides Las Vegas, BlackHat and DEF CON – run for over a week, each overlapping the other. They bring top tier security researchers, government and industry leaders, and eager hackers to learn about new vulnerabilities, new defense mechanisms, and everything in between. There are contests and parties galore, allowing hackers to test their skills and network with others. Today I’ll tell you about my trip to BSides and DEF CON in 2023.

Article Links

1. [securityweek.com] Downfall: New Intel CPU Attack Exposing Sensitive Information https://www.securityweek.com/downfall-new-intel-cpu-attack-exposing-sensitive-information/
2. [9to5mac.com] Mac malware can easily bypass Apple’s Background Task Manager, says security researcher https://9to5mac.com/2023/08/14/mac-malware-background-task-manager/
3. [whitehouse.gov] Biden-⁠Harris Administration Launches Artificial Intelligence Cyber Challenge to Protect America’s Critical Software https://www.whitehouse.gov/briefing-room/statements-releases/2023/08/09/biden-harris-administration-launches-artificial-intelligence-cyber-challenge-to-protect-americas-critical-software/
4. Donate to Maui wildfire relief fund: https://www.gofundme.com/f/5auw5q-maui-wildfire-relief-fund 
5. Veilid project (cDc): https://veilid.com/ 
6. Back Orifice: https://en.wikipedia.org/wiki/Back_Orifice 
7. Namecheck from Steve Gibson: https://youtu.be/hGyVuszu0F8?t=6240 
8. CalyxOS mention: https://en.wikipedia.org/wiki/CalyxOS
9. Tom Kemp on LinkedIn Live: https://www.tomkemp.ai/blog/2023/7/19/live-event-the-state-of-us-privacy-and-ai-regulation 

Further Info

• Dragon Challenge Coin promotion: https://fdsd.me/promo823 
• Nominate someone for a challenge coin: https://fdsd.me/quest 
• Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 
• Give the gift of privacy and security: https://fdsd.me/coupons 
• Support our mission! https://fdsd.me/support 
• Subscribe to the newsletter: https://fdsd.me/newsletter 

Table of Contents

Use these timestamps to jump to a particular section of the show.

• 0:01:04: Preview
• 0:01:27: Look ma, I’m on Wikipedia!
• 0:02:16: Steve Gibson reads FDSD
• 0:03:16: Show overview
• 0:04:29: What is Hacker Summer Camp?
• 0:06:21: Using Lockdown Mode on Apple
• 0:07:20: BSides Las Vegas 2023, Josh Corman, et al
• 0:08:28: BSides pool party
• 0:09:44: I skipped out on linecon
• 0:11:36: I skipped the merch line, too
• 0:12:36: Darknet Diaries meets FDSD
• 0:13:13: r00t party!
• 0:15:14: cDc announces Veilid platform
• 0:18:48: Voting Village, brush with Chris Krebs
• 0:20:34: Interview with Nick Oles
• 0:22:49: Meet Joe Gray (“Practical Social Engineering” author)
• 0:23:22: cDc Veilid launch party
• 0:24:19: Checking in the the Hack-a-Sat team
• 0:38:00: EFF Tech Trivia
• 0:38:37: Hacker Jeopardy
• 0:40:11: Evacuation of Caesar’s Forum
• 0:41:50: Closing ceremonies
• 0:42:48: No swag or amulet sightings
• 0:43:31: Downfall: New Intel CPU Attack Exposing Sensitive Information
• 0:47:24: Mac malware can easily bypass Apple’s Background Task Manager
• 0:52:22: Maui wildfire relief fund
• 0:53:01: DARPA Launches AI Cyber Challenge
• 0:54:07: Looking ahead
• 0:55:28: Dragon coin promotion is ending soon