Uploaded August 2023 | Updated September 2026, 2 weeks ago

---

How did Tavis Ormandy fuzz CPUs to discover Zenbleed? In this video we learn about the techniques to make this work!


This video is sponsored by Google: security.googleblog.com/2023/08/downfall-and-zenbleed-googlers-helping.html

LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Join the Hextree Discord: discord.gg/xgQpCQCpvy

Watch part 2: youtube.com/watch?v=9EY_9KtxyPg

Original Zenbleed Writeup: lock.cmpxchg8b.com/zenbleed.html

AMD Security Bulletin: amd.com/en/resources/product-security/bulletin/amd-sb-7008.html
Tavis Ormandy: twitter.com/taviso
Sudoedit Exploit Series: youtube.com/playlist?list=PLhixgUqwRTjy0gMuT4C3bmjeZjuNQyqdx
Documented Intel Performance Counters: perfmon-events.intel.com/skylake_server.html
RIDL Video: youtube.com/watch?v=x_R1DeZxGc0

CHAPTERS
00:00 - Intro
01:22 - Zenbleed Proof of Concept
03:06 - Tavis Ormandy
04:18 - How Fuzzing Works
06:31 - CPU Performance Counters
11:06 - Detect Bugs with "Oracle Serialization"
15:09 - Fuzzing and Discovering Zenbleed
18:46 - Outro

SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com

WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog

#SecurityResearch #Zenbleed #LiveOverflow

(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.