TechSNAP

Episode 380: Terminal Fault

August 16th, 2018  |  32 mins 31 secs

cabot, conpty, cpu, foreshadow, hyperthreading, inprivate, intel, l1 cache, l1 terminal fault, l1tf, meltdown, nagios, page tables, pty, sgx, sms, spectre, speculative execution, sysadmin podcast, techsnap, two factor auth, virtualization, windows, windows console

Microsoft’s making radical changes to Windows 10, and a new type of speculative execution attack on Intel’s processors is targeting cloud providers.

Episode 378: Two-Factor Fraud

August 2nd, 2018  |  31 mins 56 secs

bgp, cisco, duo security, netspectre, nice, s3, sms, spectre, sysadmin podcast, techsnap, telegram, two-factor authentication, verizon leak

Reddit’s Two Factor procedures fail, while Google’s prevents years of attacks. We’ll look at the different approaches, and discuss the fundamental weakness of Reddit’s approach.

Episode 369: Another Pass at Bypass

May 23rd, 2018  |  44 mins 43 secs

ddos, dhcp flaw, electron exploit, meltdown, red hat, signal, spectre, speculative store bypass, sysadmin podcast, upnp, variant 4

We’ll explain how Speculative Store Bypass works, and the new mitigation techniques that are inbound.

Episode 357: The Return of Spectre

February 22nd, 2018  |  31 mins 53 secs

firefox lockdown, ibrs, indirect branch restricted speculation, inspec, kernel page table isolation, kpti, meltdown, patch status, pcid, process context identifier, spectre, tesla cryptojacking, windows analytics

New variants, bad patches, busted microcode and devastated performance. It’s a TechSNAP Meltdown and Spectre check up.

Episode 351: Performance Meltdown

January 11th, 2018  |  41 mins 43 secs

backdoor, coordinated disclosure, freebsd, kaiser, kpti, macos high sierra, meltdown, pcid, perfmon, performance, pti, side-channel attack, spectre, speculative execution, sysadmin podcast, sysinternals, techsnap, ubuntu, wd my cloud

The types of workloads that will see the largest performance impacts from Meltdown, tools to test yourself, and the outlook for 2018.

Plus a concise breakdown of Meltdown, Spectre, and side-channel attacks like only TechSNAP can.