Re:Meltdown Update Kernel doesnt boot
by hvidgaard on Thursday January 11, 2018 @02:21AM
(#16122032)
It's still "only" 1.7gb/hour. If programs follow reasonable security practices, it shouldn't be possible to stumble upon secrets in the memory. This underlines the importance of things such as ASLR and not holding your key in memory longer than needed and rotating them as well.
[ Parent
| on HN ]
Re:Meltdown Update Kernel doesnt boot
by AstralStorm on Thursday January 11, 2018 @04:01AM
(#16122379)
Once you know the location, if the process is not randomized, you can extract from that location. You may assume some things about implementation (e.g. libstdc++ or libc++, glibc memory allocator, general compiler version)
Additionally some hardening methods like stack protector make stack allocated objects stand out a lot from register values.
Meltdown is fast enough to learn everything about layout of data structures in kernel or other programs and then use it to extract information from particular areas holding the keys.