Re:Exploiting the Math.expm1 typing bug in V8
by staticassertion on Thursday January 03, 2019 @12:00PM
(#18816651)
I believe AWS does share customer information within a device, but with a lot of sandboxing below that. You can watch this talk to learn more:
https://www.youtube.com/watch?v=QdzV04T_kec
I think the threat model is basically that you'd need a KVM kernel 0-day + the ability to exploit it, so a point of privilege such as outside of the firecracker sandbox.
I think the threat model is basically that you'd need a KVM kernel 0-day + the ability to exploit it, so a point of privilege such as outside of the firecracker sandbox.