Re:Side channel that leaked data from Intel CPUs patched by ...
by mschuster91 on Wednesday August 07, 2019 @02:21AM
(#20632370)
> literally accessing the same address in a loop and and nothing else
All you need for this is Javascript with Web Workers to run effectively multithreaded.
Re:Side channel that leaked data from Intel CPUs patched by ...
by wademealing on Wednesday August 07, 2019 @12:17AM
(#20631938)
I believe that this (SWAPGS) vector is impractical but previous spectre proof of concepts exists if you look hard enough.
Re:Side channel that leaked data from Intel CPUs patched by ...
by jnordwick on Wednesday August 07, 2019 @02:50AM
(#20632484)
I have never seen one that would work in the wild. I don't think it is possible. We've had plenty of time to see something somewhere, but nothing. I gone through the papers, read other code, I've seen nothing that didn't require help from the target.
I don't accept the general hand waving "they keep getting better" because they haven't.
Most of these the exfiltration rate is so slow that simply xor'ing the secret with a random seed that changes locations or moving the memory around itself would prevent any attack.
Re:Side channel that leaked data from Intel CPUs patched by ...
by edwintorok on Wednesday August 07, 2019 @03:43AM
(#20632700)
Meltdown rate was quite a bit higher than the other exploits.
Still no spectre exploit (or even attempt) found in the wild. There should have been something by now.
If anybody has access to the POC code I would love to see it. Until (and probably after I see how laughable it is), I'll assume this is just a press release by some security company.