Re:Sandsifter: find undocumented instructions and bugs on x8...
by _wmd on Friday July 28, 2017 @04:23AM
(#14872819)
tl'dr of the slides:
He's found a new f00f bug, winter 2017 is going to be interesting :)
[ Parent
| on HN ]
Re:Sandsifter: find undocumented instructions and bugs on x8...
by tempay on Friday July 28, 2017 @05:06AM
(#14872949)
For those not aware: https://en.wikipedia.org/wiki/Pentium_F00F_bug
Can these kind of bugs possible to exploit to cause anything more than minor annoyance?
Re:Sandsifter: find undocumented instructions and bugs on x8...
by hexadecimated on Friday July 28, 2017 @06:12AM
(#14873179)
If it works inside a VM, an attacker could potentially cause a widespread denial of service on cloud computing platforms like Azure and AWS.
Re:Sandsifter: find undocumented instructions and bugs on x8...
by viraptor on Friday July 28, 2017 @06:13AM
(#14873181)
Use them to exploit the system itself - not likely. (Unless they cause some specific bad behaviour rather than a crash) But you can definitely use a DoS issue for other effects. For example if someone is using an auth revokation system which fails open, you could kill that part to use expired credentials. Or if you're able to sometimes inject data, you can keep killing the caching systems until your response is the saved one. (Like in DNS hijack)
Re:Sandsifter: find undocumented instructions and bugs on x8...
by qb45 on Friday July 28, 2017 @09:11AM
(#14873970)
Observation: the length of the censored "XXX hardware bug" text on the slides matches neither Intel, AMD nor Transmeta. Unlikely to be VIA too.
Either it's deception or perhaps some obscure low-end embedded vendor.
edit: for the curious, it's "(redacted) hardware bugs" :)
Re:Sandsifter: find undocumented instructions and bugs on x8...
by Veedrac on Friday July 28, 2017 @09:30AM
(#14874083)
You mean the black bar on the PDF? That just says "(redacted)".
Re:Sandsifter: find undocumented instructions and bugs on x8...
by rst on Friday July 28, 2017 @03:12PM
(#14876711)
Or they were smart enough to change the size of the box so that it can't be used to easily identify the vendor (from among a very small set of candidates).
Re:Sandsifter: find undocumented instructions and bugs on x8...
by ericfrederich on Friday July 28, 2017 @09:32AM
(#14874107)
"Obscure" enough to run Windows though
Re:Sandsifter: find undocumented instructions and bugs on x8...
by duskwuff on Friday July 28, 2017 @01:55PM
(#14876142)
Possibly something weird like Vortex86?
Re:Sandsifter: find undocumented instructions and bugs on x8...
by rfth on Friday July 28, 2017 @10:26AM
(#14874455)
If I was a betting man I would say ARM.
Re:Sandsifter: find undocumented instructions and bugs on x8...
by adrianmonk on Friday July 28, 2017 @03:15PM
(#14876737)
Isn't this fuzzing tool x86-only?