Off-Topic: Vacation in Crete

This year’s family vacation was spent on the Greek island of Crete, in an all-inclusive resort close to Chania on the north coast. Overall we got nice weather and an enjoyable pool-and-sun holiday, mostly staying at the hotel with a few excursions. In the following, I will go through some of the most surprising or interesting observations I made in Crete. Greek letters are cool, but I do not think we will go back to Greece any time soon when there are higher-quality places available (such as Spain).

Continue reading “Off-Topic: Vacation in Crete”

Intel Blog: Finding BIOS Vulnerabilities with Symbolic Execution and Virtual Platforms

I have just published a piece about the Intel Excite project on my Software Evangelist blog at the Intel Developer Zone. The Excite project is using a combination of of symbolic execution, fuzzing, and concrete testing to find vulnerabilities in UEFI code, in particular in SMM. By combining symbolic and concrete techniques plus fuzzing, Excite achieves better performance and effect than using either technique alone.

Continue reading “Intel Blog: Finding BIOS Vulnerabilities with Symbolic Execution and Virtual Platforms”