Cyberus Technology Blog

Cyberus Technology/ Software engineer (m/f/d)/ Dresden, Germany/ Full-Time/ Permanent remote possible/ https://www.cyberus-technology.de/ Cyberus Technology GmbH is a 2017 founded company lead by engineers and information scientists, who offer an innovative virtualization and test automation solution for IT security. We are 25 people spread all over Germany, with offices in Dresden and Braunschweig. We are mostly engineers, developing products based on our secure virtualization platform SVP and our software engineering methodology CIdoka. You are experienced in C++ programming? You have a particular knack for virtualization and low-level software engineering? We are looking for software engineers that are interested in working on our custom virtualization platform - facilitated by a company-wide embrace of Nix/NixOS. We also offer internships for students! Your tasks: Implementing & texting new features; Enhancing existing capabilities; measuring and improving performance Your profile: Experience with Linux and C++ programming; Experience with NixOS/ Nix is a plus; Relevant skills in software engineering and operating systems; Curiosity and drive; Prior experience with VirtualBox is helpful; Experience with Rust is a bonus We offer: An open-minded, creative and lovely team; an owner-managed company; a flat organization with short decision-making processes; drinks and fruits for free on our site; a free parking lot or a job ticket; legendary team events; modern…

EU-origin software used by EU public sector: https://www.secunet.com/en/products-consulting/sina > The first building block was securely encrypted communication via the internet, followed by secure laptops for government employees. Today, SINA forms an integrated ecosystem of applications, computers, network encryption and a cloud platform. With over 250,000 active devices, SINA has established itself as the de facto standard in the German federal administration. https://cyberus-technology.de/en/products/hypervisor > Our open-source Hypervisor is built on proven components, such as Linux, KVM and Cloud Hypervisor.. Cyberus Hypervisor is built with security as a first-class citizen. We use memory-safe languages, provide a high-level API to build secure compartments and make sure you never have to deal with those CVEs.

Direct link to the bugs' central webpage, which is far more informative than this article: https://cpu.fail/ Included are the papers describing each exploit as well as links to PoC repositories. Edit: here's a link to the blog describing ZombieLoad, which is perhaps the best high-level overview: https://www.cyberus-technology.de/posts/2019-05-14-zombieload.html

Cyberus Technology | https://cyberus-technology.de | Software Engineer | REMOTE (Germany, Spain, Canada) | Full-time Our mission is to build open-source digital infrastructure that stands the test of time. We engineer modular, transparent and reproducible software that “just works,” empowering organisations to run critical systems safely for decades. Guided by science, data and a deep respect for democracy and human rights, we act as a trusted, family-friendly partner for both customers and teammates. We contribute actively to local, national and global open-source communities while continuously shrinking our environmental footprint. Lean processes, smart automation and sustainable profitability keep us independent—and ready to collaborate for the long run. CtrlOS is our long-term supported downstream version of NixOS, and it’s a strategically important project for our organization. It forms the foundation for a wide range of customer solutions and internal systems. Building and maintaining CtrlOS is not only technically exciting — it’s also a rare opportunity to bring NixOS to a whole ecosystem of devices. We’re looking for someone who brings energy, curiosity, and a strong drive to get things done. You don’t need to know everything — none of us do — but you should be excited to explore new territory, solve real problems, and help shape something meaningful. If you’re interested please e-mail us at [email protected]

https://github.com/cyberus-technology/virtualbox-kvm I learned of it via: https://news.ycombinator.com/item?id=39300317 Also interesting: vgpu suport (intel srv-io) https://cyberus-technology.de/articles/vbox-kvm-sriov

With this version of VBox, it's quite possble to pass a GPU to the VM. Have a look at https://www.cyberus-technology.de/products/hypervisor if you want to see a demo.

You can also setup VFIO in VirtualBox/KVM. We haven't polished it yet though. You can check the video here to see GPU virtualization in action: https://www.cyberus-technology.de/products/hypervisor (Don't mind the English, we are not native speakers. :)

The blog post is buried a bit deep, but has the actual technical information on the topic https://www.cyberus-technology.de/posts/2019-05-14-zombieload.html

In short: * Core and Xeon CPUs affected, others apparently not. * HT on or off, any kind of virtualization, and even SGX are penetrable. * Not OS-specific, apparently. * Sample code provided. https://www.cyberus-technology.de/posts/2019-05-14-zombieload.html

This comes alongside: * The overview page https://cpu.fail/ , on Hacker News as https://news.ycombinator.com/item?id=19911715 * https://zombieloadattack.com/ , on Hacker News as https://news.ycombinator.com/item?id=19911341 (The technical paper is hidden inside a collapsed part of the page and is at https://www.cyberus-technology.de/posts/2019-05-14-zombieload.html .) * https://mdsattacks.com/ , on Hacker News at https://news.ycombinator.com/item?id=19911277