How a researcher hacked his own computer and found 'worst' chip flaw

Re:How a researcher hacked his own computer and found 'worst... by tischler on Thursday January 04, 2018 @03:29PM (#16073770)

How was this bug independently discovered by three research teams (Graz University of Technology, Google's Project Zero, Cyberus Technology)? Was it known beforehand that such an attack or a similar one could be possible in theory such that all teams came up the same idea?

[ Parent | on HN ]

Re:How a researcher hacked his own computer and found 'worst... by fjarlq on Thursday January 04, 2018 @03:36PM (#16073833)

CPU side-channel attacks have been an active area of research for years. Here's an incomplete list of papers. "by 2016 it got crazy so this is nowhere near complete" https://twitter.com/csirac2/status/948575368956411904

csirac2's list on reddit: https://www.reddit.com/r/securityengineering/comments/7o2uzy...

[ Parent | on HN ]

Re:How a researcher hacked his own computer and found 'worst... by exhilaration on Thursday January 04, 2018 @03:31PM (#16073789)

The article suggests that all the research teams were inspired by one source: The team quickly got in touch with Intel and learned that other researchers - inspired in part by Fogh’s blog - had made similar discoveries.

[ Parent | on HN ]

Re:How a researcher hacked his own computer and found 'worst... by tischler on Thursday January 04, 2018 @03:38PM (#16073861)

This is the blog article: https://cyber.wtf/2017/07/28/negative-result-reading-kernel-...

[ Parent | on HN ]

Re:How a researcher hacked his own computer and found 'worst... by oh-kumudo on Thursday January 04, 2018 @03:39PM (#16073872)

But this blog is written in 07/28 last year, Google reports this bug back in 06/01, right?

[ Parent | on HN ]

Re:How a researcher hacked his own computer and found 'worst... by DannyBee on Thursday January 04, 2018 @04:13PM (#16074138)

Yes. The timeline mentioned is the timeline for others, not Google.

[ Parent | on HN ]

Re:How a researcher hacked his own computer and found 'worst... by Relys on Thursday January 04, 2018 @03:35PM (#16073829)

Backstory: https://twitter.com/tehjh/status/948737135007424512

Original paper (which I actually read when it first came out earlier this year): http://www.cs.binghamton.edu/~dima/micro16.pdf

First PoC for leaking ASLR based on timing side-channel attack: https://github.com/felixwilhelm/mario_baslr

[ Parent | on HN ]

Re:How a researcher hacked his own computer and found 'worst... by taneq on Thursday January 04, 2018 @07:09PM (#16075333)

As others have said, the groundwork was already in place and it was an active topic of research. On top of that, responsible disclosure practices mean that other teams don't know when the first team makes their breakthrough, since nothing is published at that stage, so they have the opportunity to independently make the discovery.

[ Parent | on HN ]