About speculative execution vulnerabilities in ARM-based and Intel CPUs

Re:About speculative execution vulnerabilities in ARM-based ... by torgard on Thursday January 04, 2018 @09:15PM (#16075948)

> Intel said its chips, which power Macs and devices from other manufacturers, contain the flaw as well as processors based on ARM Holdings architecture, which is used in iOS devices and Android smartphones.

Has it been proven that Meltdown can affect ARM processors, or is this Intel speculation?

[ Parent | on HN ]

Re:About speculative execution vulnerabilities in ARM-based ... by cbhl on Thursday January 04, 2018 @09:20PM (#16075975)

Google tested a Proof-of-Concept exploit against an ARM Cortex A57.

https://googleprojectzero.blogspot.com/2018/01/reading-privi...

disclaimer: I work at Google, but not on Project Zero.

[ Parent | on HN ]

Re:About speculative execution vulnerabilities in ARM-based ... by gmartres on Thursday January 04, 2018 @09:19PM (#16075965)

According to ARM yes, but only on a few architectures: https://developer.arm.com/support/security-update (Meltdown is CVE-2017-5754 and is responsible for Variant 3 and Variant 3a). See also https://github.com/marcan/speculation-bugs/blob/master/READM... which tries to summarize every known attack/platform/mitigation.

[ Parent | on HN ]

Re:About speculative execution vulnerabilities in ARM-based ... by smallnamespace on Thursday January 04, 2018 @09:20PM (#16075972)

Cache timing attacks are a pretty general technique, and just depends on the combination of speculative execution + not flushing the cache upon misprediction rollback (which would be very expensive).

It would be a huge surprise if ARM were somehow immune.

[ Parent | on HN ]

Re:About speculative execution vulnerabilities in ARM-based ... by Kocrachon on Thursday January 04, 2018 @09:19PM (#16075964)

It can impact them, just not to the same extreme. I believe ARM is only impacted when data is user space to user space.

[ Parent | on HN ]

Re:About speculative execution vulnerabilities in ARM-based ... by Kikawala on Thursday January 04, 2018 @09:20PM (#16075967)

Meltdown affects Intel chips, Spectre affects Intel, AMD, and ARM chips.

[ Parent | on HN ]

Re:About speculative execution vulnerabilities in ARM-based ... by gmartres on Thursday January 04, 2018 @09:33PM (#16076028)

Meltdown also affects some ARM chips according to ARM itself: https://developer.arm.com/support/security-update

[ Parent | on HN ]

Re:About speculative execution vulnerabilities in ARM-based ... by Xorlev on Thursday January 04, 2018 @09:28PM (#16076003)

Spectre likely affects any chip with speculative execution, regardless of vendor, even things like Power8. So that's fun.

[ Parent | on HN ]

Re:About speculative execution vulnerabilities in ARM-based ... by ksec on Friday January 05, 2018 @01:52AM (#16077044)

"We have people everywhere" - Mr White.

Did Google name it Spectre after the the James Bond movie?

And I thought AMD put out a release saying they are not affected.

[ Parent | on HN ]

Re:About speculative execution vulnerabilities in ARM-based ... by Mindwipe on Friday January 05, 2018 @05:10AM (#16077707)

I imagine it was named Spectre because it's going to be haunting us for years to come.

[ Parent | on HN ]