News for hackers. Stuff that matters.
Re:CPU cache-based communication between two co-located virt... by amenghra on Thursday March 30, 2017 @03:13PM (#13998060)
Does this have any practical applications? You might get a perf win, but the likelihood of being collocated is small.
Re:CPU cache-based communication between two co-located virt... by cowboysauce on Thursday March 30, 2017 @04:23PM (#13998577)
I think at this point it's mostly of interest to security researchers and malware writers. It's not hard to imagine malware using this technique to transfer data out of an infected VM in a difficult to detect manner. If you can infect enough VMs it might be worth it. Also, this type of technique could be interesting to government employed malware writers.
Re:CPU cache-based communication between two co-located virt... by sillysaurus3 on Thursday March 30, 2017 @04:45PM (#13998713)
Another interesting way to exfiltrate data is via DNS. Few networks block DNS, so you can set up a protocol on your own DNS server to transfer data.

The bandwidth is pretty decent, too.

Re:CPU cache-based communication between two co-located virt... by cmdrfred on Thursday March 30, 2017 @09:57PM (#14000666)
I'm still surprised how well this classic attack works. I've seen $100k IDS and firewall packages not detect this.

I use this personally. Works behind captive portals sometimes too: http://code.kryo.se/iodine/