Re:Reading privileged memory with a side-channel
by rurban on Wednesday January 03, 2018 @07:15PM
(#16066788)
Not against Spectre, which can extract any memory via javascript or user applications. Eg your secret keys or passwords
[ Parent
| on HN ]
Re:Reading privileged memory with a side-channel
by oh-kumudo on Wednesday January 03, 2018 @07:45PM
(#16066952)
Spectre is a much more serious bug I feel, but it requires the VM to run the malicious code snippet inside itself and with the right context, not from other guest VM, that is how I understand this. The kinda bug that would totally destroy cloud as a business is the one that other guest VM can read your memory...which doesn't seem like to be the case, for now...
Re:Reading privileged memory with a side-channel
by rurban on Thursday January 04, 2018 @05:17AM
(#16069202)
Spectre is mostly about JavaScript extracting keys and passwords from the browser process. Install their ChromeZero extension for a start.
Meltdown on the other hand can do everything. But only on Intel.