News for hackers. Stuff that matters.

A comment on Reading privileged memory with a side-channel. Parent comment

Re:Reading privileged memory with a side-channel by porjo on Wednesday January 03, 2018 @11:43PM (#16068098)
From the Spectre whitepaper:

> In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser sandboxing, by mounting them via portable JavaScript code. We wrote a JavaScript program that successfully reads data from the address space of the browser process running it.

The whitepaper doesn't contain example JS code however

[ Parent | on HN ]
Re:Reading privileged memory with a side-channel by diyseguy on Thursday January 04, 2018 @12:01AM (#16068166)
This whitepaper describes the Javascript exploit in Section IV. I'm struggling to understand it though: http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf
[ Parent | on HN ]
Re:Reading privileged memory with a side-channel by diyseguy on Thursday January 04, 2018 @11:00AM (#16071321)
This too was provided as a proof of concept (without explanation): https://brainsmoke.github.io/misc/slicepattern.html. I'm not sure what I'm looking at though
[ Parent | on HN ]
Re:Reading privileged memory with a side-channel by diyseguy on Tuesday January 09, 2018 @08:42PM (#16111928)
This is the first implementation in Javascript I have seen so far: http://xlab.tencent.com/special/spectre/js/check.js
[ Parent | on HN ]