<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Mojo on +5 Security Research</title><link>https://overkazaf.github.io/blogs/tags/mojo/</link><description>Recent content in Mojo on +5 Security Research</description><generator>Hugo</generator><language>zh-cn</language><lastBuildDate>Sun, 23 Aug 2026 03:30:00 +0800</lastBuildDate><atom:link href="https://overkazaf.github.io/blogs/tags/mojo/index.xml" rel="self" type="application/rss+xml"/><item><title>Chrome 里藏了个虚拟机，它到底在保护什么</title><link>https://overkazaf.github.io/blogs/posts/chrome-vmp-protection-vm-dispatch-whitebox/</link><pubDate>Sun, 23 Aug 2026 03:30:00 +0800</pubDate><guid>https://overkazaf.github.io/blogs/posts/chrome-vmp-protection-vm-dispatch-whitebox/</guid><description>系统分析 Chrome 原生媒体模块中的 VM-based Protection：从 EME/Mojo/CDM 调用边界，到 VM 调度器、key blinding、白盒数据路径、完整性校验与可观测性压制，解释现代 VMP 保护为什么能显著提高密钥提取和静态逆向成本。</description></item></channel></rss>