News for hackers. Stuff that matters.
Re:Ledger's Advanced Side Channel Analysis Repository by hart_russell on Tuesday February 19, 2019 @12:53PM (#19201041)
Is this an attack that can be mitigated by a firmware update?
Re:Ledger's Advanced Side Channel Analysis Repository by anfractuosity on Tuesday February 19, 2019 @02:03PM (#19201750)
https://en.wikipedia.org/wiki/Side-channel_attack#Countermea... might be of interest especially this part:

"In the case of timing attacks against targets whose computation times are quantized into discrete clock cycle counts, an effective countermeasure against is to design the software to be isochronous, that is to run in an exactly constant amount of time, independently of secret values. This makes timing attacks impossible.[14] Such countermeasures can be difficult to implement in practice, since even individual instructions can have variable timing on some CPUs."

Re:Ledger's Advanced Side Channel Analysis Repository by pietjepuk88 on Tuesday February 19, 2019 @01:50PM (#19201618)
> Lascar stands for Ledger’s Advanced Side Channel Analysis Repository. Its goal is to gather and provide common tools and techniques used in the field of Side Channel Analysis, within an open, customizable library.

It's not an attack. It's just something that the Ledger security team has been working on.