News for hackers. Stuff that matters.

A comment on Reading privileged memory with a side-channel. Parent comment

Re:Reading privileged memory with a side-channel by oh-kumudo on Wednesday January 03, 2018 @07:45PM (#16066952)
Spectre is a much more serious bug I feel, but it requires the VM to run the malicious code snippet inside itself and with the right context, not from other guest VM, that is how I understand this. The kinda bug that would totally destroy cloud as a business is the one that other guest VM can read your memory...which doesn't seem like to be the case, for now...
[ Parent | on HN ]
Re:Reading privileged memory with a side-channel by rurban on Thursday January 04, 2018 @05:17AM (#16069202)
Spectre is mostly about JavaScript extracting keys and passwords from the browser process. Install their ChromeZero extension for a start.

Meltdown on the other hand can do everything. But only on Intel.

[ Parent | on HN ]