News for hackers. Stuff that matters.
Re:The mysterious case of the Linux Page Table Isolation pat... by empath75 on Monday January 01, 2018 @01:47PM (#16047353)
If this guy can figure this out, anybody with the means and motivation to write such an exploit is already working on t.
Re:The mysterious case of the Linux Page Table Isolation pat... by slackingoff2017 on Monday January 01, 2018 @06:54PM (#16048769)
All of the serious hackers with resources have a paid mole involved in the embargo discussion mailing list. The most dangerous people already know.

Embargo is simply a way to make sure the huge, rich cloud providers don't have their reputation tarnished at the expense of everyone else. "Stay with bigco, we fix things before everyone finds about it"

Re:The mysterious case of the Linux Page Table Isolation pat... by saas_co_de on Monday January 01, 2018 @02:03PM (#16047447)
Exactly. This is just some random nerd. There are people all over the world whose full time job it is to track open source projects to develop exploits.
Re:The mysterious case of the Linux Page Table Isolation pat... by avh02 on Monday January 01, 2018 @02:49PM (#16047673)
and when script kiddies get wind that there is something potentially disastrous in the open, it can be exploited 10 times harder, that's all I'm saying.

I understand (and agree) that the system admins/owners should also be able to mitigate through knowledge, but it's a dilemma that I think is better resolved by the other solution

(in this case it's apparently a complex issue, but history has shown that there are surprisingly easy to exploit bugs/issues (see heartbleed, shellshock (which was apparently very quickly exploited.))

Re:The mysterious case of the Linux Page Table Isolation pat... by saas_co_de on Monday January 01, 2018 @03:38PM (#16047910)
No "script kiddies" can write exploit code for something on this level.

This guy is not releasing an exploit implementation, he is just pointing to the existence of a potential exploit that has a patch in development. He can't even figure out exactly what it is.

The only people who would be able to code this exploit would be the ones who already figured it out before this guy.