Recent Posts by Dan Anderson

Guest article by Naoki Tanaka Introduction Solaris Verified Boot verifies the RSA signatures of SPARC boot blocks and Solaris kernel modules before execution. Until now, Verified Boot has been available on Solaris for the host domain and also for Kernel Zones, but not for the Oracle VM Server (LDoms) guest domains. With LDoms 3.4, Oracle Solaris introduces Verified Boot for LDoms guests. In Verified Boot, we maintain a chain of trust, in which only verified code can verify other...

The views expressed on this blog do not necessarily reflect the views of Oracle. BSides PDX@bsidespdx is Oregon's local Computer Security Conference lasting two days. About half the speakers are local and half out-of-town. The talks were all 20 minutes, some of which I summarize below. The conference also had CTF and Hacker Jeopardy contests. I didn't summarize all the talks—it was hard given the fast pace of the presentations. See my previous blog for thekeynote speech by...

The views expressed on this blog do not necessarily reflect the views of Oracle. BSides PDX@bsidespdx is Oregon's local Computer Security Conference lasting two days. About half the speakers are local and half out-of-town. My next blow has summaries of some of the BSides PDX 2016 Technical sessions. Oregon's Senator Ron Wyden@RonWyden. height="299" width="234" /> US Senator Wyden, a member of the Senate Intelligence Committee,is one of the few computer security savvy senators...

CA cert Overview X.509 certificates ("certs") contain a RSA public key and the key's signer ("CN" or "Subject"). This is to verify that some file or object was signed with the key holder's private key. Certificate Authority certificates ("CA certs") are issued by well-known organizations to verify that a cert is legitimate and that the public key in the cert can be trusted. Solaris-specific Solaris keeps the CA certs in /etc/certs/CA/. Hashed links to the CA certs are in /etc/o...

Solaris Kernel Zones Verified Boot Introduction Oracle Solaris 11.3 introduces Kernel Zones Verified Boot. To review, both Solaris Verified Boot and Kernel Zones were introduced in Solaris 11.2. Solaris Verified Boot verifies the RSA digital signatures of Solaris kernel modules before execution. For more information, see my blog onSolaris Verified Boot Solaris Kernel Zones partitions Solaris into multiple virtual computers each running their own independent Solaris kernel Solaris...

Solaris Verified Boot Introduction Verified Boot here refers to verification of object modules before execution using digital signatures. If enabled, Solaris Verified Boot checks the factory-signed signature in a kernel module before loading and executing the module. This is to detect accidental or malicious modification of a module.The action taken is configurable and, when enabled, will either print a warning message and continue loading and executing the module or will fail...

Introduction to Toorcon 15 (2013) A Tale of One Software Bypass of MS Windows 8 Secure Boot Breaching SSL, One Byte at a Time Running at 99%: Surviving an Application DoS Security Response in the Age of Mass Customized Attacks x86 Rewriting: Defeating RoP and other Shinanighans Clowntown Express: interesting bugs and running a bug bounty program Active Fingerprinting of Encrypted VPNs Making Attacks Go Backwards Mask Your Checksums—The Gorry Details Adventures with weird...

Solaris X86 64-bit Assembly Programming This is a simple example on writing, compiling, and debugging Solaris 64-bit x86 assembly language with a C program. This is also referred to as "AMD64" assembly. The term "AMD64" is used in an inclusive sense to refer to all X86 64-bit processors, whether AMD Opteron family or Intel 64 processor family. Both run Solaris x86.I'm keeping this example simple mainly to illustrate how everything comes together—compiler, assembler, linker,...

Solaris Kernel Zones Verified Boot Introduction Oracle Solaris 11.3 introduces Kernel Zones Verified Boot. To review, both Solaris Verified Boot and Kernel Zones were introduced in Solaris 11.2. Solaris Verified Boot verifies the RSA digital signatures of Solaris kernel modules before execution. For more information, see my blog onSolaris Verified Boot Solaris Kernel Zones partitions Solaris into multiple virtual computers each running their own independent Solaris kernel Solaris...