Impressive

Just wrapped up teaching my hypervisor development class. Always refreshing to work with sharp folks from diverse backgrounds—and rewarding to help them get started. The next class will be in person at @hexacon.bsky.social. Check out the conference page if you're interested.

The registration is open now. See you in Paris!

My talk about the recent SMM architecture and security at #TheSAS2024: youtube.com/watch?v=AIGj... The conference was well organized and had plenty of networking opportunities. Though, the best thing was the venue :) It is at a beautiful resort again this year, so you will love it.

This is like "VT-x 101". The essence of HW-assisted VT, everything needed to virtualize Windows on-the-fly, and a bit of security in 2 days. It misses a ton of fun discussions and exercises that are in my 4 days class, but I am giving back to the community that helped me learn.

I am thrilled to be back and offer the in-person training once again at Hexacon, the fabulous conf. in Paris hexacon.fr/trainer/tanda/ Get hands-on experience with virtualization and learn real-world applications and bugs of them! The tickets will be available for purchase soon.

🦀 Hello World! The Rust project now has an official presence on Bluesky! ✨ We'll be posting the same on our Mastodon and Bluesky accounts, so you won't miss anything on either platform.

The new blog post on supervisor shadow stack restrictions / supervisor shadow-stack control tandasat.github.io/blog/2025/04...

Intel SDM rev 87 was out. Updates? Good luck with diffing 5000+ pages of PDF files. @intel forgot to update the Documentation Changes file.

WinDbg script to check kCFG target function validity, and also to dump actual cfguard bitmap (which can be quite different from what's specified in the image GFIDS, needs more research): pastebin.com/64kujJNb. !check_cfguard "nt!longjmp" !dump_cfguard_bitmap "nt", "C:/cfguard_bitmap_ntoskrnl.bin"

Great talk! It's very encouraging to see more big players like MSFT adopting Rust rapidly and widely I was using C/C++ for 10+ years, but now I code almost exclusively in Rust and am happy about that. It is more productive and enjoyable.

Added AMD support to hvext, the windbg extension for reversing Hyper-V! github.com/tandasat/hvext You can check what SVM features are enabled, which MSRs and IO ports are accessible, and how nested page table looks like, for NT, SK and regular VMs.

The new microphone setup for my next remote class! Not that you pay for my clear voice :D but this will improve the learning experience Btw, more than 1/3 of the seats were sold, so do not wait too long. Remote classes become full well before early-bird ends

Excited to announce that registration for my hypervisor class in May is open! tandasat.github.io This class teaches you how hypervisors can be used for security and research, including hardening, fuzzing, and reversing, as well as their design options and vulnerabilities.

Both Intel SDM v86 and Instruction Set Extensions Programming Reference v56 are out. intel.com/sdm SDM updates are minor. The other adds proper virtualization of IA32_SPEC_CTRL (on top of mask/shadow added before).

I had a blast doing the research for Part 2 of my series on using JTAG to debug Hypervisor-Managed Linear Address Translation (HLAT): www.asset-intertech.com/resources/bl.... In this blog, I used SourcePoint to pinpoint where in the boot flow HLAT is enabled on Alder Lake performance cores.

My first pull request to the Rust community got merged. If you find trivial errors, just make pull requests.

The thiserror crate started to support no_std. Good news for low-level/embedded devs github.com/dtolnay/this...

Important news: Microsoft is working to bring SMAP into Windows www.youtube.com/watch?v=-3jx... Great talk by Joe Bialek from MORSE team

Can recommend Satoshi's training as well, rarely had a training that was such hands-on.

Happy to hear that!

I updated all host, exercise, and demo setups of my hypervisor class to the latest version of OSes (Ubuntu 24, Windows 11 24H2, and macOS 15). If you are interested in taking my future courses, you can subscribe the schedule announcement only mailing list at groups.io/g/system-pro...