News for hackers. Stuff that matters.

A comment on Reading privileged memory with a side-channel. Parent comment

Re:Reading privileged memory with a side-channel by user5994461 on Thursday January 04, 2018 @02:16AM (#16068595)
They say they can reliably read memory around 120kB/s with one vulnerability and 1kB/s with the other. It just works, all the time. Some of the PoC takes a few minutes to initialize.

I'd say difficulty level is easy.

[ Parent | on HN ]
Re:Reading privileged memory with a side-channel by Certhas on Thursday January 04, 2018 @07:00AM (#16069681)
However, only one of the PoCs runs on AMD, and that doesn't cross process boundaries.

So how easy is it to turn that PoC into something I should worry about? Seems like browsers are the most affected by this scenario, but that also means harden the browser (separate process per page) and it might be difficult to exploit.

[ Parent | on HN ]
Re:Reading privileged memory with a side-channel by lrem on Thursday January 04, 2018 @07:52AM (#16069946)
As a general rule of thumb, if everyone already has a PoC, you should assume someone has been doing targeted practical attacks for a while.
[ Parent | on HN ]
Re:Reading privileged memory with a side-channel by Avamander on Thursday January 04, 2018 @06:08AM (#16069412)
Difficulty to exploit is easy once you have the exploit running. Writing a new exploit is really hard, otherwise we wouldn't be starting 2018 with these news.
[ Parent | on HN ]