MIT's groundbreaking development in custom operating systems has opened a new frontier in chip functionality research. The team at MIT's Computer Science and Artificial Intelligence Laboratory (CSAIL) has created Fractal, a kernel that offers researchers an unprecedented view into the inner workings of processors. This innovative tool, designed to study chip functionality, has already revealed previously unknown behaviors in Apple's M1 processor, including evidence of a speculative attack known as 'Phantom' affecting Apple Silicon. Fractal's ability to expose hardware in ways not originally intended provides a clean room for chip research, free from the noise and interference typically associated with general-purpose operating systems. By booting directly on bare metal and exposing primitives that allow for runtime privilege level switching, Fractal enables researchers to study the behavior of internal structures like branch predictors, caches, and translation lookaside buffers with minimal interference. This level of control has led to significant findings, such as the confirmation of protection mechanisms in Apple's M1 processor and the discovery of a side channel that allows user code to influence kernel cache fetches. The team's work has also produced the first evidence of Phantom speculation on Apple Silicon, a previously AMD and Intel-specific issue. Fractal's impact extends beyond its immediate findings. Its design as a reusable research infrastructure, rather than a one-off experiment, supports multiple architectures and provides a foundation for future studies. The MIT team's collaboration with Apple's product security team and the disclosure of their findings demonstrate the tool's potential to enhance the reliability and accuracy of microarchitecture research. As Fractal continues to evolve, it holds the promise of becoming a cornerstone in the field, enabling researchers to explore the intricate workings of processors with unprecedented clarity and control.
